Karthikeyan Bhargavan Cédric Fournet Andrew D. Gordon Verifying policy-based web services security. 2008 30 ACM Trans. Program. Lang. Syst. 6 http://doi.acm.org/10.1145/1391956.1391957 db/journals/toplas/toplas30.html#BhargavanFG08