Formal verification of TCP and T/TCP. - Mark Anthony Shawn Smith (1997)