SIF: Enforcing confidentiality and integrity in Web applications
JML: notations and tools supporting detailed design in Java