Verifying SOS specificationsBard BloomAllan Chenget al.1996COMPASS Computer Assurance 1996Conference paper