A formal specification and verification method for the prevention of denial of service. - Che-Fu Yu; Virgil D. Gligor (S&P, 1988)