Alessandro Coglio Cordell Green A Constructive Approach to Correctness, Exemplified by a Generator for Certified Java Card Applets. 57-63 2005 VSTTE http://dx.doi.org/10.1007/978-3-540-69149-5_7 conf/vstte/2005 db/conf/vstte/vstte2005.html#CoglioG05