A calculus for composing security policies (2002)

by Lujo Bauer, Jarred Ligatti, David Walker