Benjamin Schwarz Hao Chen David Wagner Jeremy Lin Wei Tu Geoff Morrison Jacob West Model Checking An Entire Linux Distribution for Security Violations. 13-22 2005 conf/acsac/2005 ACSAC http://doi.ieeecomputersociety.org/10.1109/CSAC.2005.39 db/conf/acsac/acsac2005.html#SchwarzCWLTMW05