Refactoring programs to secure information flows
Security Policies and Security Models