- USENIX Security Symposium, USENIX, (2001)
- STOC, page 51-63. ACM, (1984)
- Theoretical Computer Science 336(2-3):209--234 (2005)
- CLIMA, volume 5405 of Lecture Notes in Computer Science, page 97-116. Springer, (2008)
- ACM Trans. Graph. 30(4):54 (2011)
- VMCAI, volume 2937 of Lecture Notes in Computer Science, page 44-57. Springer, (2004)
- Mechanizing Mathematical Reasoning, volume 2605 of Lecture Notes in Computer Science, page 59-98. Springer, (2005)
- J. Log. Comput. 1(5):573-574 (1991)
- Comput. J. 30(2):134-148 (1987)
- Comput. J. 39(4):303-324 (1996)
- Comput. J. 45(1):2-11 (2002)
- Comput. J. 29(5):404-415 (1986)
- FM, volume 6664 of Lecture Notes in Computer Science, page 57-72. Springer, (2011)
- CHARME, volume 987 of Lecture Notes in Computer Science, page 124-145. Springer, (1995)
- CHARME, volume 987 of Lecture Notes in Computer Science, page 225-245. Springer, (1995)
- Electr. Notes Theor. Comput. Sci. 68(4):605-620 (2002)
- The Analysis of Concurrent Systems, volume 207 of Lecture Notes in Computer Science, page 157-183. Springer, (1983)
- STTT 2(4):350-365 (2000)
- Formal Asp. Comput. 7(5):533-549 (1995)
- Acta Inf. (1984)


author