Lujo Bauer Jay Ligatti David Walker Composing expressive runtime security policies. 2009 18 ACM Trans. Softw. Eng. Methodol. 3 http://doi.acm.org/10.1145/1525880.1525882 db/journals/tosem/tosem18.html#BauerLW09