Stephen McCamant Michael D. Ernst A simulation-based proof technique for dynamic information flow. 41-46 2007 PLAS http://doi.acm.org/10.1145/1255329.1255336 conf/pldi/2007plas db/conf/pldi/plas2007.html#McCamantE07