Leen Helmink M. P. A. Sellink Frits W. Vaandrager Proof-Checking a Data Link Protocol. 127-165 1993 conf/types/1993 TYPES db/conf/types/types93.html#HelminkSV93