Using Formal Methods to Reason about Architectural Standards. - Kevin J. Sullivan; John Socha; Mark Marchukov (ICSE, 1997)

Analysis of a Conflict between Aggregation and Interface Negotiation in Microsoft's Component Object Model. - Kevin J. Sullivan; Mark Marchukov; John Socha (IEEE Trans. Software Eng., 1999)