A Cross Tenant Access Control (CTAC) Model for Cloud Computing: Formal Specification and Verification
The yices smt solver