Policy auditing over incomplete logs: theory, implementation and applications