Dao Nam Anh Richard Moore Formal Modeling of Large Domains. 246- 1996 conf/apsec/1996 APSEC https://doi.org/10.1109/APSEC.1996.566759 https://doi.ieeecomputersociety.org/10.1109/APSEC.1996.566759 db/conf/apsec/apsec1996.html#AnhM96