Model checking trace-based information flow properties Kagalavadi Ramesh, Raghavendra Heftet / 2012 / Engelsk