Nimal Nissanke Etienne J. Khayat Risk Based Security Analysis of Permissions in RBAC. 332-341 2004 conf/sis/2004 WOSIS db/conf/sis/wosis2004.html#NissankeK04