Steve Schneider Verifying Authentication Protocol Implementations. 5-24 2002 conf/fmoods/2002 FMOODS db/conf/fmoods/fmoods2002.html#Schneider02