Xiaodong Yi Xuejun Yang A Security Verification Method for Information Flow Security Policies Implemented in Operating Systems. 280-291 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2836&spage=280 2003 conf/icics/2003 ICICS db/conf/icics/icics2003.html#YiY03