Jonathan K. Millen Local Reconfiguration Policies. 48-56 1999 IEEE Symposium on Security and Privacy http://computer.org/conferen/proceed/s%26p/0176/01760048abs.htm db/conf/sp/sp1999.html#Millen99