Journal: IEEE Trans. Dependable Sec. Comput.