AutoISES: Automatically inferring security specifications and detecting violationsLin TanXiaolan Zhanget al.2008USENIX Security 2008