Formal Methods at Scale. - William Martin 010; Patrick Lincoln; William L. Scherlis (IEEE Secur. Priv., 2022)