James Heather Steve Schneider To infinity and beyond or, avoiding the infinite in security protocol analysis. 346-353 2006 conf/sac/2006 SAC http://doi.acm.org/10.1145/1141277.1141359 db/conf/sac/sac2006.html#HeatherS06