Martín Abadi The good, the bad, and the provable. 1 2008 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1455770.1455772 conf/ccs/2008 db/conf/ccs/ccs2008.html#Abadi08