AutoISES: Automatically Inferring Security Specification and Detecting Violations
Bandera: extracting finite-state models from Java source code