Joseph E. Stoy Xiaowei Shen Arvind Proofs of Correctness of Cache-Coherence Protocols. 43-71 2001 conf/fm/2001 FME http://link.springer.de/link/service/series/0558/bibs/2021/20210043.htm db/conf/fm/fme2001.html#StoySA01