Jan Jürjens Mark Yampolskiy Code security analysis with assertions. 392-395 2005 conf/kbse/2005 ASE http://doi.acm.org/10.1145/1101908.1101978 db/conf/kbse/ase2005.html#JurjensY05