"Applying Formal Methods to a Certifiably Secure Software System." IEEE Transactions on Software Engineering 34, no. 1 (8): 82-97.