Enforcing system-wide properties | IEEE Conference Publication | IEEE Xplore