Extending noninterference properties to the timed world - Roscoe, A; Huang, J (Proceedings of SAC 2006, 2006)