Model checking to find vulnerabilities in an instruction set architecture. - Chris Bradfield; Cynthia Sturton (HOST, 2016)