A formal model for Unix setuid | IEEE Conference Publication | IEEE Xplore