Increased information flow needs for high-assurance composite evaluationsPaul A. KargerHelmut Kurth2004IEEE IWIA 2004