Paul Ammann Sushil Jajodia The Integrity Challenge. 59-70 1999 conf/tc11-5/1999 IICIS db/conf/tc11-5/iicis1999.html#AmmannJ99