An access control model for protecting provenance graphs | IEEE Conference Publication | IEEE Xplore