David G. Clarke John Potter James Noble Ownership Types for Flexible Alias Protection. 48-64 1998 OOPSLA http://doi.acm.org/10.1145/286936.286947 db/conf/oopsla/oopsla98.html#ClarkePN98