William Young;Nancy G. Leveson
Massachusetts Institute of Technology, Cambridge, MA;Massachusetts Institute of Technology, Cambridge, MA
Proof techniques for hierarchically structured programs
Communications of the ACM
Applying a more powerful new safety methodology to security risks.