Specifying information-flow controls | IEEE Conference Publication | IEEE Xplore