Cryptographic Security Architecture: Design and Verification

"No Silver Bullet: Essence and Accidents of Software Engineering". Frederick Brooks Jr., IEEE Computer, Vol.20, No.4 (April 1987), p. 10.
"Striving for Correctness", Marshall Abrams and Marvin Zelkowitz, Computers and Security, Vol.14, No.8 (1995), p. 719.
"Does OO Sync with How We Think?", Les Hatton, IEEE Software, Vol.15, No.3 (May/June 1998), p. 46.
"Software Engineering: A Practitioners Approach (3 rd ed)", Roger Pressman, McGraw-Hill International Edition, 1992.
"A Specifier's Introduction to Formal Methods", Jeannette Wing, IEEE Computer, Vol.23, No.9 (September 1990), p. 8.
"Strategies for Incorporating Formal Specifications in Software Development", Martin Fraser, Kuldeep Kumar, and Vijay Vaishnavi, Communications of the ACM, Vol.37, No.10 (October 1994), p. 74.
"Formal Methods and Models", James Willams and Marshall Abrams, "Information Security: An Integrated Collection of Essays", IEEE Computer Society Press, 1995, p. 170.
"A Technique for Software Module Specification with Examples", David Parnas, Communications of the ACM, Vol.15, No.5 (May 1972), p. 330.
"Implications of a Virtual Memory Mechanism for Implementing Protection in a Family of Operating Systems", William Price, PhD thesis, Carnegie-Mellon University. June 1973.
"An Experiment with Affirm and HDM", Jonathan Millen and David Drake. The Journal of Systems and Software, Vol.2, No.2 (June 1981), p. 159.
"Applying Formal Methods to an Information Security Device: An Experience Report", James Kirby Jr., Myla Archer, and Constance Heitmeyer, Proceedings of the 4 th International Symposium on High Assurance Systems Engineering (HASE'99). IEEE Computer...