<bibliography>
 <citation type="article" key="basin:06:mds">
  <author>David <surname>Basin</surname></author>
  <author>J&#252;rgen <surname>Doser</surname></author>
  <author>Torsten <surname>Lodderstedt</surname></author>
  <year>2006</year>
  <title>Model Driven Security: From UML Models to Access Control Infrastructures</title>
  <journal>ACM Trans. Softw. Eng. Methodol.</journal>
  <volume>15</volume>
  <number>1</number>
  <pages>39&#8211;91</pages>
  <doi>10.1145/1125808.1125810</doi>
 </citation>
 <citation type="inproceedings" key="BertolissiC:ppdp">
  <author>Clara <surname>Bertolissi</surname></author>
  <author>Maribel <surname>Fern&#225;ndez</surname></author>
  <year>2008</year>
  <title>A Rewriting Framework for the Composition of Access Control Policies</title>
  <booktitle>Proceedings of the 10th International ACM SIGPLAN Conference on Principles and Practice of Declarative Programming</booktitle>
  <series>PPDP '08</series>
  <publisher>ACM</publisher>
  <address>New York, NY, USA</address>
  <pages>217&#8211;225</pages>
  <doi>10.1145/1389449.1389476</doi>
 </citation>
 <citation type="article" key="bodden:12:clara">
  <author>Eric <surname>Bodden</surname></author>
  <author>Patrick <surname>Lam</surname></author>
  <author>Laurie <surname>Hendren</surname></author>
  <year>2012</year>
  <title>Partially Evaluating Finite-State Runtime Monitors Ahead of Time</title>
  <journal>ACM Trans. Program. Lang. Syst.</journal>
  <volume>34</volume>
  <number>2</number>
  <pages>7:1&#8211;7:52</pages>
  <doi>10.1145/2220365.2220366</doi>
 </citation>
 <citation type="incollection" key="BonattiS03">
  <author>Piero A. <surname>Bonatti</surname></author>
  <author>Pierangela <surname>Samarati</surname></author>
  <year>2004</year>
  <title>Logics for Authorizations and Security</title>
  <editor>Jan <surname>Chomicki</surname></editor>
  <editor>Ron <surname>van der Meyden</surname></editor>
  <editor>Gunter <surname>Saake</surname></editor>
  <booktitle>Logics for Emerging Applications of Databases</booktitle>
  <publisher>Springer Berlin Heidelberg</publisher>
  <pages>277&#8211;323</pages>
  <doi>10.1007/978-3-642-18690-5\@uscore .8</doi>
 </citation>
 <citation type="article" key="bovet:08:antlrworks">
  <author>Jean <surname>Bovet</surname></author>
  <author>Terence <surname>Parr</surname></author>
  <year>2008</year>
  <title>ANTLRWorks: An ANTLR Grammar Development Environment</title>
  <journal>Softw. Pract. Exper.</journal>
  <volume>38</volume>
  <number>12</number>
  <pages>1305&#8211;1332</pages>
  <doi>10.1002/spe.v38:12</doi>
 </citation>
 <citation type="book" key="buschmann:96:posa">
  <author>Frank <surname>Buschmann</surname></author>
  <author>Regine <surname>Meunier</surname></author>
  <author>Hans <surname>Rohnert</surname></author>
  <author>Peter <surname>Sommerlad</surname></author>
  <author>Michael <surname>Stal</surname></author>
  <year>1996</year>
  <title>Pattern-oriented Software Architecture: A System of Patterns</title>
  <publisher>John Wiley &#38; Sons, Inc.</publisher>
  <address>New York, NY, USA</address>
 </citation>
 <citation type="inproceedings" key="fer:92:rbac">
  <author>David <surname>Ferraiolo</surname></author>
  <author>Richard <surname>Kuhn</surname></author>
  <year>1992</year>
  <title>Role-Based Access Control</title>
  <booktitle>In 15th NIST-NCSC National Computer Security Conference</booktitle>
  <pages>554&#8211;563</pages>
 </citation>
 <citation type="article" key="fer:01:rbacstandard">
  <author>David F. <surname>Ferraiolo</surname></author>
  <author>Ravi <surname>Sandhu</surname></author>
  <author>Serban <surname>Gavrila</surname></author>
  <author>D. Richard <surname>Kuhn</surname></author>
  <author>Ramaswamy <surname>Chandramouli</surname></author>
  <year>2001</year>
  <title>Proposed NIST Standard for Role-based Access Control</title>
  <journal>ACM Trans. Inf. Syst. Secur.</journal>
  <volume>4</volume>
  <number>3</number>
  <pages>224&#8211;274</pages>
  <doi>10.1145/501978.501980</doi>
 </citation>
 <citation type="misc" key="eclipse">
  <author>The Eclipse <surname>Foundation</surname></author>
  <title>Eclipse</title>
  <url>http://www.eclipse.org</url>
 </citation>
 <citation type="book" key="gosling:05:jls">
  <author>James <surname>Gosling</surname></author>
  <author>Bill <surname>Joy</surname></author>
  <author>Guy <surname>Steele</surname></author>
  <author>Gilad <surname>Bracha</surname></author>
  <year>2005</year>
  <title>Java(TM) Language Specification, The (3rd Edition) (Java (Addison-Wesley))</title>
  <publisher>Addison-Wesley Professional</publisher>
 </citation>
 <citation type="book" key="gupta:jee">
  <author>Arun <surname>Gupta</surname></author>
  <year>2013</year>
  <title>Java EE 7 Essentials</title>
  <publisher>O'Reilly Media</publisher>
 </citation>
 <citation type="article" key="hamlen:06:ccem">
  <author>Kevin W. <surname>Hamlen</surname></author>
  <author>Greg <surname>Morrisett</surname></author>
  <author>Fred B. <surname>Schneider</surname></author>
  <year>2006</year>
  <title>Computability Classes for Enforcement Mechanisms</title>
  <journal>ACM Trans. Program. Lang. Syst.</journal>
  <volume>28</volume>
  <number>1</number>
  <pages>175&#8211;205</pages>
  <doi>10.1145/1111596.1111601</doi>
 </citation>
 <citation type="article" key="krasner:88:mvc">
  <author>Glenn E. <surname>Krasner</surname></author>
  <author>Stephen T. <surname>Pope</surname></author>
  <year>1988</year>
  <title>A Cookbook for Using the Model-view Controller User Interface Paradigm in Smalltalk-80</title>
  <journal>J. Object Oriented Program.</journal>
  <volume>1</volume>
  <number>3</number>
  <pages>26&#8211;49</pages>
  <url>http://dl.acm.org/citation.cfm?id=50757.50759</url>
 </citation>
 <citation type="inproceedings" key="priebe:04:pattern">
  <author>Torsten <surname>Priebe</surname></author>
  <author>Eduardo B. <surname>Fernandez</surname></author>
  <author>Jens I. <surname>Mehlau</surname></author>
  <author>G&#252;nther <surname>Pernul</surname></author>
  <year>2004</year>
  <title>A pattern system for access control</title>
  <booktitle>Research Directions In Data and Applications Security XVIII</booktitle>
  <publisher>Kluwer</publisher>
  <pages>25&#8211;28</pages>
  <doi>10.1007/1-4020-8126-6\@uscore .16</doi>
 </citation>
 <citation type="phdthesis" key="SantanaA:phd">
  <author>A. <surname>Santana de Oliveira</surname></author>
  <year>2008</year>
  <title>R&#233;&#233;criture et Modularit&#233; pour les Politiques de S&#233;curit&#233;</title>
  <school>Universit&#233; Henri Poincare</school>
  <address>Nancy, France</address>
 </citation>
 <citation type="article" key="SohrK:Isabelle">
  <author>Karsten <surname>Sohr</surname></author>
  <author>Michael <surname>Drouineaud</surname></author>
  <author>Gail-Joon <surname>Ahn</surname></author>
  <author>Martin <surname>Gogolla</surname></author>
  <year>2008</year>
  <title>Analyzing and Managing Role-Based Access Control Policies</title>
  <journal>IEEE Transactions on Knowledge and Data Engineering</journal>
  <volume>20</volume>
  <number>7</number>
  <pages>924&#8211;939</pages>
  <doi>10.1109/TKDE.2008.28</doi>
 </citation>
 <citation type="book" key="steel:06:csp">
  <author>Christopher <surname>Steel</surname></author>
  <author>Ramesh <surname>Nagappan</surname></author>
  <author>Ray <surname>Lai</surname></author>
  <year>2006</year>
  <title>Core security patterns: Best practices and strategies for J2EE, Web services, and identity management</title>
  <series>Prentice Hall Core Series</series>
  <publisher>Prentice-Hall</publisher>
  <url>http://www.coresecuritypatterns.com/</url>
 </citation>
 <citation type="inproceedings" key="zarnett:10:annot">
  <author>Jeff <surname>Zarnett</surname></author>
  <author>Mahesh <surname>Tripunitara</surname></author>
  <author>Patrick <surname>Lam</surname></author>
  <year>2010</year>
  <title>Role-based Access Control (RBAC) in Java via Proxy Objects Using Annotations</title>
  <booktitle>Proceedings of the 15th ACM Symposium on Access Control Models and Technologies</booktitle>
  <series>SACMAT '10</series>
  <publisher>ACM</publisher>
  <address>New York, NY, USA</address>
  <pages>79&#8211;88</pages>
  <doi>10.1145/1809842.1809858</doi>
 </citation>
</bibliography>
