Protocol Verification by the Inductive Method John Mitchell Stanford TECS Week2005.
Analyzing SET with Inductive Method CS 395T. Theorem Proving for Protocol Analysis uProve correctness instead of looking for bugs Use higher-order logic.