Aris Zakinthinos

• A least privilege mechanism for user processes
• On the composition of security properties