Hiroshi Sakaki Kazuo Yanoo Ryuichi Ogawa A Model-Based Method for Security Configuration Verification. 60-75 2006 conf/iwsec/2006 IWSEC http://dx.doi.org/10.1007/11908739_5 db/conf/iwsec/iwsec2006.html#SakakiYO06