Reasoning about confidentiality requirements | IEEE Conference Publication | IEEE Xplore