John McLean Twenty Years of Formal Methods. 115-116 1999 IEEE Symposium on Security and Privacy http://computer.org/conferen/proceed/s%26p/0176/01760115abs.htm db/conf/sp/sp1999.html#McLean99