Sigrid Gürgens Peter Ochsenschläger Carsten Rudolph On a formal framework for security properties. 457-466 2005 27 Computer Standards & Interfaces 5 http://dx.doi.org/10.1016/j.csi.2005.01.004 db/journals/csi/csi27.html#GurgensOR05