Sushil Jajodia Pierangela Samarati V. S. Subrahmanian 31-42 1997 conf/sp/1997 IEEE Symposium on Security and Privacy http://doi.ieeecomputersociety.org/10.1109/SECPRI.1997.601312 db/conf/sp/sp1997.html#JajodiaSS97