M Mizuno, D Schmidt - Formal Aspects of Computing, 1992 - Springer
… The development is noteworthy because it is completely rigorous: the flow control algorithm
… iterative data flow analysis, and we prove that our security flow control algorithm satisfies the …