Formal and Informal Specifications of a Secure System Component: first results in a comparative study. - John S. Fitzgerald; T. M. Brookes; M. A. Green; Peter Gorm Larsen (FME, 1994)