Security Policy Design with Colored Petri Nets -- Order-Sorted Parameterization and