J. Todd Wittbold Dale M. Johnson Information Flow in Nondeterministic Systems. 144-161 1990 IEEE Symposium on Security and Privacy db/conf/sp/sp1990.html#WittboldJ90