A logical framework for reasoning about access control models (2003)

by E Bertino, B Catania, E Ferrari, P Perlasca
Venue:ACM Transactions on Information and System Security (TISSEC