The formal development of secure systems (my 1992 doctoral thesis)blog.jgc.org1 pointjgrahamc2 years ago