Roger M. Needham Logic and Over-Simplification. 2-3 1998 LICS db/conf/lics/lics98.html#Needham98