K. Rustan M. Leino
Microsoft Research, Redmond, WA
Trace-based verification of imperative programs with I/O
Journal of Symbolic Computation