Trusted Software Verification: A Case Study. - Terry C. Vickers Benzel; Deborah A. Tavilla (S&P, 1985)