J. G. Cederquist Ricardo Corin M. A. C. Dekker Sandro Etalle J. I. den Hartog Gabriele Lenzini 133-151 2007 6 Int. J. Inf. Sec. 2-3 http://dx.doi.org/10.1007/s10207-007-0017-y db/journals/ijisec/ijisec6.html#CederquistCDEHL07