Alan B. Shaffer Mikhail Auguston Cynthia E. Irvine Timothy E. Levin A security domain model to assess software for exploitable covert channels. 45-56 2008 PLAS http://doi.acm.org/10.1145/1375696.1375703 conf/pldi/2008plas db/conf/pldi/plas2008.html#ShafferAIL08