Thomas Santen Preservation of probabilistic information flow under refinement. 213-249 2008 206 Inf. Comput. 2-4 http://dx.doi.org/10.1016/j.ic.2007.07.008 db/journals/iandc/iandc206.html#Santen08