Werner Stephan Formal Methods for Security: Lightweight Plug-In or New Engineering Discipline. 587-591 2006 conf/fm/2006 FM http://dx.doi.org/10.1007/11813040_39 db/conf/fm/fm2006.html#Stephan06