Bart Jacobs Wolter Pieters Martijn Warnier Statically checking confidentiality via dynamic labels. 50-56 2005 WITS http://doi.acm.org/10.1145/1045405.1045411 conf/popl/2005wits db/conf/popl/wits2005.html#JacobsPW05