Analysing the Security Properties of Object−Capability Patterns - Murray, T (2010)