Heitmeyer, Constance L., Myla M. Archer, Elizabeth I. Leonard, and John D. McLean. "Applying Formal Methods to a Certifiably Secure Software System." IEEE Transactions on Software Engineering 34, no. 1 (8): 82-97.