The formal model is also useful in checking … the program FSA … We call the FSA describing the user ID … composite FSA. … This method is useful for checking proper usage … @ Can a program fail to drop privilege? … [p. 14] @ Which part of the program may …
Google-1
Google-2
Copyright clearance needed for quotation.