Applying Formal Methods to Detect and Resolve Ambiguities in Privacy Requirements - Agrafiotis, I; Creese, S; Goldsmith, M; Papanikolaou, N (2011)