Nathan Whitehead Jordan Johnson Martín Abadi Policies and Proofs for Code Auditing. 1-14 2007 conf/atva/2007 ATVA http://dx.doi.org/10.1007/978-3-540-75596-8_1 db/conf/atva/atva2007.html#WhiteheadJA07