Enforcing high-level protocols in low-level software (2001)

by Robert DeLine, Manuel Fähndrich
Venue:In Proc. ACM PLDI