Alexander Lux Heiko Mantel Who Can Declassify?. 35-49 2008 Formal Aspects in Security and Trust http://dx.doi.org/10.1007/978-3-642-01465-9_3 conf/ifip1-7/2008 db/conf/ifip1-7/fast2008.html#LuxM08