Holger Schmidt Pattern-Based Confidentiality-Preserving Refinement. 43-59 2009 ESSoS http://dx.doi.org/10.1007/978-3-642-00199-4_5 conf/essos/2009 db/conf/essos/essos2009.html#Schmidt09