Constance L. Heitmeyer Myla Archer Elizabeth I. Leonard John McLean Applying Formal Methods to a Certifiably Secure Software System. 82-98 2008 34 IEEE Trans. Software Eng. 1 http://doi.ieeecomputersociety.org/10.1109/TSE.2007.70772 db/journals/tse/tse34.html#HeitmeyerALM08