Gavin Lowe Towards a Completeness Result for Model Checking of Security Protocols. 96-105 1998 CSFW http://dlib.computer.org/conferen/csfw/8488/pdf/84880096.pdf db/conf/csfw/csfw1998.html#Lowe98