Doug Kuhlman Ryan Moriarty Tony Braskich Steve Emeott Mahesh V. Tripunitara A Correctness Proof of a Mesh Security Architecture. 315-330 2008 CSF http://doi.ieeecomputersociety.org/10.1109/CSF.2008.23 conf/csfw/2008 db/conf/csfw/csf2008.html#KuhlmanMBET08