Proving Security Protocols Correct Lawrence C. Paulson Computer Laboratory How Detailed Should a Model Be? concrete abstract too detailed not usable not credible too simple…
