Dines Bjørner Trusted Computing Systems: The ProCoS Experience. 15-34 1992 ICSE http://doi.acm.org/10.1145/143062.143080 db/conf/icse/icse92.html#Bjorner92