µJava: Embedding a programming language in a theorem prover (2000)

by T Nipkow, D v Oheimb, C Pusch
Venue:Foundations of Secure Computation, volume 175 of NATO Science Series F: Computer and Systems Sciences