Roderick Chapman Adrian Hilton Enforcing security and safety models with an information flow analysis tool. 39-46 2004 conf/sigada/2004 SIGAda http://doi.acm.org/10.1145/1032297.1032305 db/conf/sigada/sigada2004.html#ChapmanH04