Attacker Control and Impact for Confidentiality and Integrity (Logical Methods in Computer Science, 2011)