Allan Heydon Mark W. Maimone J. D. Tygar Jeannette M. Wing Amy Moormann Zaremski Miró: Visual Specification of Security. 1185-1197 http://www.computer.org/tse/ts1990/e1185abs.htm 1990 16 IEEE Trans. Software Eng. 10 db/journals/tse/tse16.html#HeydonMTWZ90