Mike Bond, Jolyon Clulow: Integrity of intention (a theory of types for security APIs). Inf. Secur. Tech. Rep. 11(2): 93-99 (2006)