Correctness by Construction: Developing a Commercial Secure System.Published in:IEEE Software, 2002, v. 19, n. 1, p. 18, doi. 10.1109/52.976937By:Hall, Anthony;Chapman, RoderickPublication type:Article