A formal model of security dependency for analysis and testing of secure systems | IEEE Conference Publication | IEEE Xplore