Richard Lai A Success Story of Verifying a Real Complex Protocol. 69-83 1997 36 Journal of Systems and Software 1 db/journals/jss/jss36.html#Lai97a