Elisa Bertino Barbara Catania Elena Ferrari Paolo Perlasca A logical framework for reasoning about access control models. 41-52 2001 SACMAT http://doi.acm.org/10.1145/373256.373261 db/conf/sacmat/sacmat2001.html#BertinoCFP01