Néstor Cataño Tim Wahls Executing JML specifications of Java card applications: a case study. 404-408 2009 SAC http://doi.acm.org/10.1145/1529282.1529373 conf/sac/2009 db/conf/sac/sac2009.html#CatanoW09