Steve A. Schneider

• Formal Aspects of Security