Ron van der Meyden Thomas Wilke Preservation of epistemic properties in security protocol implementations. 212-221 2007 TARK http://doi.acm.org/10.1145/1324249.1324278 conf/tark/2007 db/conf/tark/tark2007.html#MeydenW07