MAC and UML for secure software design. - Thuong Doan; Steven A. Demurjian; T. C. Ting; Andreas Ketterl (FMSE, 2004)