A Practical Alternative to Domain and Type Enforcement Integrity Formal Models. - Liuying Tang; Sihan Qing (Inscrypt, 2006)