Correctness by construction: Better can also be cheaper
Information-flow and data-flow analysis of while-programs