D. Malkhi and M. Reiter 1997
In The 10th IEEE Computer Security Foundations Workshop (CSFW), June 1997