Model-Based Design and Analysis of Permission-Based Security. - Jan Jürjens; Markus Lehrhuber; Guido Wimmel (ICECCS, 2005)