A Case Study in the Formal Refinement of a Distributed Secure System.

Gill Randell

Browse the full ESORICS paper archive.