Author: International School on Foundations of Security Analysis and Design (2006-2007 Bertinoro, Italy)