Eunjee Song Raghu Reddy Robert B. France Indrakshi Ray Geri Georg Roger T. Alexander Verifiable composition of access control and application features. 120-129 2005 conf/sacmat/2005 SACMAT http://doi.acm.org/10.1145/1063979.1064001 db/conf/sacmat/sacmat2005.html#SongRFRGA05