2009 journal article
Requirements-based access control analysis and policy specification (ReCAPS)
Information and Software Technology, 51(6), 993–1009.
2004 journal article
Financial privacy policies and the need for standardization
IEEE Security & Privacy, 2(2), 36–45.
2004 journal article
Inside JetBlue's privacy policy violations
IEEE Security & Privacy, 2(6), 18-.