Jan Cederquist Muhammad Torabi Dashti An intruder model for verifying liveness in security protocols. 23-32 2006 conf/ccs/2006fmse FMSE http://doi.acm.org/10.1145/1180337.1180340 db/conf/ccs/ccs2006fmse2006.html#CederquistD06