Ty van den Akker Quinn Snell Mark J. Clement The YGuard access control model: set-based access control. 75-84 2001 SACMAT http://doi.acm.org/10.1145/373256.373268 db/conf/sacmat/sacmat2001.html#AkkerSC01