Using CQUAL for static analysis of authorization hook placementXiaolan ZhangAntony Edwardset al.2002USENIX Security 2002