Gilles Barthe Tamara Rezk David A. Naumann Deriving an Information Flow Checker and Certifying Compiler for Java. 230-242 2006 conf/sp/2006 IEEE Symposium on Security and Privacy http://doi.ieeecomputersociety.org/10.1109/SP.2006.13 db/conf/sp/sp2006.html#BartheRN06