Torben Amtoft John Hatcliff Edwin Rodríguez Robby Jonathan Hoag David Greve Specification and Checking of Software Contracts for Conditional Information Flow. 229-245 2008 FM http://dx.doi.org/10.1007/978-3-540-68237-0_17 conf/fm/2008 db/conf/fm/fm2008.html#AmtoftHRRHG08