Experience-Based Access Management: A Life-Cycle Framework for Identity and Access Management Systems
On Adversary Models and Compositional Security