methods. Anotherrange of automated tools are associated with MDA and MDD
(which are considered semiformalratherthan formal methods).
In Correctness by Construction [229] Anthony Hall and Roderick
Chapman [230] describe the development of a secure Certificate Authority, an IA