Keith Irwin Ting Yu William H. Winsborough Enforcing security properties in task-based systems. 41-50 2008 SACMAT http://doi.acm.org/10.1145/1377836.1377843 conf/sacmat/2008 db/conf/sacmat/sacmat2008.html#IrwinYW08