Anupam Datta Jason Franklin Deepak Garg Dilsun Kirli Kaynar A Logic of Secure Systems and its Application to Trusted Computing. 221-236 2009 IEEE Symposium on Security and Privacy http://dx.doi.org/10.1109/SP.2009.16 conf/sp/2009 db/conf/sp/sp2009.html#DattaFGK09