Meadows, Catherine ``Using Traces Based on Procedure Calls to Reason
about Composability,''  Proc. 1992 IEEE Symposium on Security and
Privacy, IEEE Press, 1992. 
<P>