Rick Crawford Matt Bishop Bhume Bhumiratana Lisa Clark Karl N. Levitt Sanitization models and their limitations. 41-56 2006 conf/nspw/2006 NSPW http://doi.acm.org/10.1145/1278940.1278948 db/conf/nspw/nspw2006.html#CrawfordBBCL06