Secure information flow: analysis and enforcement