A temporal-logic extension of role-based access control covering dynamic separation of duties. - Till Mossakowski; Michael Drouineaud; Karsten Sohr (TIME, 2003)

A First Step Towards Formal Verification of Security Policy Properties for RBAC. - Michael Drouineaud; Maksym Bortin; Paolo Torrini; Karsten Sohr (QSIC, 2004)

Formal specification of role-based security policies for clinical information systems. - Karsten Sohr; Michael Drouineaud; Gail-Joon Ahn (SAC, 2005)

Implementing Advanced RBAC Administration Functionality with USE. - Tanveer Mustafa; Karsten Sohr; Duc-Hanh Dang; Michael Drouineaud; Stefan Kowski (Electron. Commun. Eur. Assoc. Softw. Sci. Technol., 2008)

Analyzing and Managing Role-Based Access Control Policies. - Karsten Sohr; Michael Drouineaud; Gail-Joon Ahn; Martin Gogolla (IEEE Trans. Knowl. Data Eng., 2008)

Towards formal specification and verification of a role-based authorization engine using JML. - Tanveer Mustafa; Michael Drouineaud; Karsten Sohr (SESS@ICSE, 2010)