A Rigorous Approach to Uncovering Security Policy Violations in UML Designs
Alloy: a lightweight object modelling notation