Alessandro Armando Roberto Carbone Luca Compagna LTL Model Checking for Security Protocols. 385-396 2007 CSF http://dx.doi.org/10.1109/CSF.2007.24 conf/csfw/2007 db/conf/csfw/csf2007.html#ArmandoCC07