Tanvir Ahmed Anand R. Tripathi Specification and verification of security requirements in a programming model for decentralized CSCW systems. 2007 10 ACM Trans. Inf. Syst. Secur. 2 http://doi.acm.org/10.1145/1237500.1237503 db/journals/tissec/tissec10.html#AhmedT07