Thesis
Verifying security properties using type-qualifier inference
Jan 1, 2006