On the formal definition of separation-of-duty policies and their composition | IEEE Conference Publication | IEEE Xplore