A Policy Language for the Extended Reference Monitor in Trusted Operating Systems | IEEE Conference Publication | IEEE Xplore