Nan Zhang 0003 Mark Ryan Dimitar P. Guelev Synthesising verified access control systems through model checking. 1-61 2008 16 Journal of Computer Security 1 http://iospress.metapress.com/content/r558m13231010nn1/ db/journals/jcs/jcs16.html#ZhangRG08