Static Verification of Code Access Security Policy Compliance of .NET Applications