A calculus for composing security policies (2002)

by L Bauer, J Ligatti, D Walker