John Hatcliff Contract-Based Reasoning for Verification and Certification of Secure Information Flow Policies in Industrial Workflows. 3-4 2008 ICFEM http://dx.doi.org/10.1007/978-3-540-88194-0_3 conf/icfem/2008 db/conf/icfem/icfem2008.html#Hatcliff08