Efficient algorithmic safety analysis of HRU security models
A lattice model of secure information flow