Steve Bishop Matthew Fairbairn Michael Norrish Peter Sewell Michael Smith Keith Wansbrough Engineering with logic: HOL specification and symbolic-evaluation testing for TCP implementations. 55-66 2006 conf/popl/2006 POPL http://doi.acm.org/10.1145/1111037.1111043 db/conf/popl/popl2006.html#BishopFNSSW06