Karthikeyan Bhargavan Ricardo Corin Cédric Fournet Andrew D. Gordon Secure sessions for Web services. 2007 10 ACM Trans. Inf. Syst. Secur. 2 http://doi.acm.org/10.1145/1237500.1237504 db/journals/tissec/tissec10.html#BhargavanCFG07