Rajeev Joshi K. Rustan M. Leino A semantic approach to secure information flow. 113-138 2000 37 Sci. Comput. Program. 1-3 db/journals/scp/scp37.html#JoshiL00