Lujo Bauer Jarred Ligatti David Walker Types and Effects for Non-interfering Program Monitors. 154-171 http://dx.doi.org/10.1007/3-540-36532-X_10 2002 conf/isss2/2002 ISSS db/conf/isss2/isss2002.html#BauerLW02