selected publications thesis Hierarchical Security Policy Modeling and Composition for Role-Based Access Control Models with an Application to the OpenStack Cloud Platform 2017