Simon N. Foley: The Specification and Implementation of "Commercial" Security Requirements Including Dynamic Segregation of Duties. CCS 1997: 125-134