Joshua D. Guttman Security Protocol Design via Authentication Tests. 92-103 2002 conf/csfw/2002 CSFW http://csdl.computer.org/comp/proceedings/csfw/2002/1689/00/16890092abs.htm db/conf/csfw/csfw2002.html#Guttman02