Martín Abadi Mihai Budiu Úlfar Erlingsson Jay Ligatti A Theory of Secure Control Flow. 111-124 2005 conf/icfem/2005 ICFEM http://dx.doi.org/10.1007/11576280_9 db/conf/icfem/icfem2005.html#AbadiBEL05