Formal Models of Capability-Based Protection Systems | IEEE Journals & Magazine | IEEE Xplore