An access control reference architecture. - Amir Jerbi; Ethan Hadar; Carrie Gates; Dmitry Grebenev (CSAW, 2008)