"Mechanising BAN Kerberos by the Inductive Method."

Giampaolo Bella, Lawrence C. Paulson (1998)
a service of Schloss Dagstuhl - Leibniz Center for Informatics