Gilles Barthe Pierre Courtieu Guillaume Dufay Simão Melo de Sousa Tool-Assisted Specification and Verification of the JavaCard Platform. 41-59 2002 conf/amast/2002 AMAST http://link.springer.de/link/service/series/0558/bibs/2422/24220041.htm db/conf/amast/amast2002.html#BartheCDS02