Nathan Dimmock András Belokosztolszki David M. Eyers Jean Bacon Ken Moody Using trust and risk in role-based access control policies. 156-162 2004 conf/sacmat/2004 SACMAT http://doi.acm.org/10.1145/990036.990062 db/conf/sacmat/sacmat2004.html#DimmockBEBM04