Author: NATO Advanced Study Institute on Formal Logical Methods for System Security and Correctness (2007 Marktoberdorf, Germany)