182 C.L. Heitmeyer, “Applying ‘Practical’ Formal Methods to the Specification and Analysis of Security
Properties,” in Proceedings of the International Workshop on Information Assurance in Computer
Networks, Methods, Models, and Architectures for Network Computer Security, St. Petersburg, Russia,
May 21–23, 2001: 84–89.