Pileus: protecting user resources from vulnerable cloud services
A lattice model of secure information flow