Stateful Declassification Policies for Event-Driven Programs | IEEE Conference Publication | IEEE Xplore