Keith Irwin Ting Yu William H. Winsborough Avoiding information leakage in security-policy-aware planning. 85-94 2008 WPES http://doi.acm.org/10.1145/1456403.1456418 conf/wpes/2008 db/conf/wpes/wpes2008.html#IrwinYW08