This is part of the reading list of Stanford's CS PhD qualification. http://seclab.stanford.edu/SecurityQual.html