Tracey Hart Fiona Linn Roberto Morello Greg Royle Peter Kearney Peter A. Lindsay Kelvin J. Ross Owen Traynor Formal Methods Pilot Project. 238-245 1996 conf/apsec/1996 APSEC http://csdl.computer.org/comp/proceedings/apsec/1996/7638/00/76380238abs.htm db/conf/apsec/apsec1996.html#HartLMRKLRT96