Li Jiang Lingdi Ping Xuezeng Pan Combining robust declassification and intransitive noninterference. 465-471 2007 IMSCCS http://dx.doi.org/10.1109/IMSCCS.2007.54 conf/imsccs/2007 db/conf/imsccs/imsccs2007.html#JiangPP07a