Vlad Rusu Verifying an ATM Protocol Using a Combination of Formal Techniques. 710-730 2006 49 Comput. J. 6 http://dx.doi.org/10.1093/comjnl/bxl039 db/journals/cj/cj49.html#Rusu06