Simon N. Foley Separation of Duty using High Water Marks. 79-88 1991 conf/csfw/1991 CSFW db/conf/csfw/csfw1991.html#Foley91 https://doi.org/10.1109/CSFW.1991.151572