Discretionary capability confinement - Fong, Philip W. L. (International Journal of Information Security, 2008)