Elisa Bertino Barbara Catania Elena Ferrari Paolo Perlasca A logical framework for reasoning about access control models. 71-127 2003 6 ACM Trans. Inf. Syst. Secur. 1 http://doi.acm.org/10.1145/605434.605437 db/journals/tissec/tissec6.html#BertinoCFP03