An information flow analysis of recursive programs based on a lattice model of security classes Article in Electronics and Communications in Japan (Part III Fundamental Electronic Science) (April 2004)