Using security models to investigate CMW design and implementation | IEEE Conference Publication | IEEE Xplore