Rutgers University, Department of Computer Science Technical Report 645; Piscataway, New Jersey, November 2008.
This technical report accompanies the Proceedings version of our identically-titled paper in ACSAC'09, the 25th Annual Computer Security Applications Conference. It contains some details that were omitted from the Proceedings version because of space constraints.
Technical report: [ PDF ]