Matthew Finifter Adrian Mettler Naveen Sastry David Wagner Verifiable functional purity in java. 161-174 2008 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1455770.1455793 conf/ccs/2008 db/conf/ccs/ccs2008.html#FinifterMSW08