Two Demonstrations of Economical EAL5+ Development for Tokeneer. - John Anton; Martin Croxford; Alessandro Coglio; Janet Barnes; Randy Johnson; Tim Kremann (ISSSE, 2006)