1. Andronick, J., Chetali, B., Ly, O., 2003. Using Coq to verify Java Card™ applet isolation properties. Proc. Int. Conf. on Theorem Proving in Higher Order Logics, p.335–351. https://doi.org/10.1007/10930755_22
2. Börger, E., Cavarra, A., Riccobene, E., 2000. Modeling the dynamics of UML state machines. Proc. Int. Workshop on Abstract State Machines, p.223–241. https://doi.org/10.1007/3-540-44518-8_13
3. Broy, M., Cengarle, M., Rumpe, B., et al., 2007. Towards a System Model for UML: the Structural Data Model. http://rzbl04.biblio.etc.tu-bs.de:8080/docportal/servlets/MCRFileNodeServlet/DocPortal_derivate_00003898/Document_00018887.pdf
4. Dou, L., Lu, L., Yang, Z., et al., 2013. Towards mechanized semantics of UML sequence diagrams and refinement relation. Proc. 24th IASTED Int. Conf. on Modelling and Simulation, p.262–269. https://doi.org/10.2316/P.2013.802-021
5. Gonthier, G., 2007. The four colour theorem: engineering of a formal proof. Proc. 8th Asian Symp. on Computer Mathematics, p.333. https://doi.org/10.1007/978-3-540-87827-8_28