Hans Löhr Ahmad-Reza Sadeghi Christian Stüble Marion Weber Marcel Winandy Modeling Trusted Computing Support in a Protection Profile for High Assurance Security Kernels. 45-62 2009 TRUST http://dx.doi.org/10.1007/978-3-642-00587-9_4 conf/trust/2009 db/conf/trust/trust2009.html#LohrSSWW09