Reasoning About Security Models | IEEE Conference Publication | IEEE Xplore