% BibTeX database for the Isabelle documentation

 %

 % Lawrence C Paulson $Id$

 %publishers

 @string{AP="Academic Press"}

 @string{CUP="Cambridge University Press"}

 @string{IEEE="{\sc ieee} Computer Society Press"}

 @string{LNCS="Lecture Notes in Computer Science"}

 @string{MIT="MIT Press"}

 @string{NH="North-Holland"}

 @string{Prentice="Prentice-Hall"}

 @string{PH="Prentice-Hall"}

 @string{Springer="Springer-Verlag"}

 %institutions

 @string{CUCL="Computer Laboratory, University of Cambridge"}

 @string{Edinburgh="Department of Computer Science, University of Edinburgh"}

 %journals

 @string{AI="Artificial Intelligence"}

 @string{FAC="Formal Aspects of Computing"}

 @string{JAR="Journal of Automated Reasoning"}

 @string{JCS="Journal of Computer Security"}

 @string{JFP="Journal of Functional Programming"}

 @string{JLC="Journal of Logic and Computation"}

 @string{JLP="Journal of Logic Programming"}

 @string{JSC="Journal of Symbolic Computation"}

 @string{JSL="Journal of Symbolic Logic"}

 @string{PROYAL="Proceedings of the Royal Society of London"}

 @string{SIGPLAN="{SIGPLAN} Notices"}

 @string{TISSEC="ACM Transactions on Information and System Security"}

 %conferences

 @string{CADE="International Conference on Automated Deduction"}

 @string{POPL="Symposium on Principles of Programming Languages"}

 @string{TYPES="Types for Proofs and Programs"}

 %A

 @incollection{abramsky90,

   author	= {Samson Abramsky},

   title		= {The Lazy Lambda Calculus},

   pages		= {65-116},

   editor	= {David A. Turner},

   booktitle	= {Research Topics in Functional Programming},

   publisher	= {Addison-Wesley},

   year		= 1990}

 @Unpublished{abrial93,

   author	= {J. R. Abrial and G. Laffitte},

   title		= {Towards the Mechanization of the Proofs of some Classical

 		  Theorems of Set Theory},

   note		= {preprint},

   year		= 1993,

   month		= Feb}

 @incollection{aczel77,

   author	= {Peter Aczel},

   title		= {An Introduction to Inductive Definitions},

   pages		= {739-782},

   crossref	= {barwise-handbk}}

 @Book{aczel88,

   author	= {Peter Aczel},

   title		= {Non-Well-Founded Sets},

   publisher	= {CSLI},

   year		= 1988}

 @InProceedings{alf,

   author	= {Lena Magnusson and Bengt {Nordstr\"{o}m}},

   title		= {The {ALF} Proof Editor and Its Proof Engine},

   crossref	= {types93},

   pages		= {213-237}}

 @book{andrews86,

   author	= "Peter Andrews",

   title		= "An Introduction to Mathematical Logic and Type Theory: to Truth

 through Proof",

   publisher	= AP,

   series	= "Computer Science and Applied Mathematics",

   year		= 1986}

 @InProceedings{Aspinall:2000:eProof,

   author = 	 {David Aspinall},

   title = 	 {Protocols for Interactive {e-Proof}},

   booktitle = 	 {Theorem Proving in Higher Order Logics (TPHOLs)},

   year =	 2000,

   note =	 {Unpublished work-in-progress paper,

                   \url{http://www.proofgeneral.org/~da/drafts/eproof.ps.gz}}

 }

 @InProceedings{Aspinall:TACAS:2000,

   author = 	 {David Aspinall},

   title = 	 {{P}roof {G}eneral: A Generic Tool for Proof Development},

   booktitle = 	 {Tools and Algorithms for the Construction and Analysis of

                   Systems (TACAS)},

   year =	 2000,

   publisher	= Springer,

   series	= LNCS,

   volume	= 1785,

   pages = "38--42"

 }

 @Misc{isamode,

   author =	 {David Aspinall},

   title =	 {Isamode --- {U}sing {I}sabelle with {E}macs},

   note =	 {\url{http://www.proofgeneral.org/~da/Isamode/}}

 }

 @Misc{proofgeneral,

   author =	 {David Aspinall},

   title =	 {{P}roof {G}eneral},

   note =	 {\url{http://www.proofgeneral.org}}

 }

 %B

 @book{Baader-Nipkow,author={Franz Baader and Tobias Nipkow},

 title="Term Rewriting and All That",publisher=CUP,year=1998}

 @incollection{basin91,

   author	= {David Basin and Matt Kaufmann},

   title		= {The {Boyer-Moore} Prover and {Nuprl}: An Experimental

 		   Comparison}, 

   crossref	= {huet-plotkin91},

   pages		= {89-119}}

 @InProceedings{Bauer-Wenzel:2000:HB,

   author = 	 {Gertrud Bauer and Markus Wenzel},

   title = 	 {Computer-Assisted Mathematics at Work --- The {H}ahn-{B}anach Theorem in

       {I}sabelle/{I}sar},

   booktitle = 	 {Types for Proofs and Programs: TYPES'99},

   editor =       {Thierry Coquand and Peter Dybjer and Bengt Nordstr{\"o}m

                   and Jan Smith},

   series =	 {LNCS},

   year =	 2000

 }

 @INPROCEEDINGS{Berghofer-Nipkow:2000:TPHOL,

   crossref        = "tphols2000",

   title           = "Proof terms for simply typed higher order logic",

   author          = "Stefan Berghofer and Tobias Nipkow",

   pages           = "38--52"}

 @InProceedings{Berghofer-Wenzel:1999:TPHOL,

   author = 	 {Stefan Berghofer and Markus Wenzel},

   title = 	 {Inductive datatypes in {HOL} --- lessons learned in

                   {F}ormal-{L}ogic {E}ngineering},

   crossref =     {tphols99}}

 @book{Bird-Wadler,author="Richard Bird and Philip Wadler",

 title="Introduction to Functional Programming",publisher=PH,year=1988}

 @book{Bird-Haskell,author="Richard Bird",

 title="Introduction to Functional Programming using Haskell",

 publisher=PH,year=1998}

 @Article{boyer86,

   author	= {Robert Boyer and Ewing Lusk and William McCune and Ross

 		   Overbeek and Mark Stickel and Lawrence Wos},

   title		= {Set Theory in First-Order Logic: Clauses for {G\"{o}del's}

 		   Axioms},

   journal	= JAR,

   year		= 1986,

   volume	= 2,

   number	= 3,

   pages		= {287-327}}

 @book{bm79,

   author	= {Robert S. Boyer and J Strother Moore},

   title		= {A Computational Logic},

   publisher	= {Academic Press},

   year		= 1979}

 @book{bm88book,

   author	= {Robert S. Boyer and J Strother Moore},

   title		= {A Computational Logic Handbook},

   publisher	= {Academic Press},

   year		= 1988}

 @Article{debruijn72,

   author	= {N. G. de Bruijn},

   title		= {Lambda Calculus Notation with Nameless Dummies,

 	a Tool for Automatic Formula Manipulation,

 	with Application to the {Church-Rosser Theorem}},

   journal	= {Indag. Math.},

   volume	= 34,

   pages		= {381-392},

   year		= 1972}

 @Article{ban89,

   author	= {M. Burrows and M. Abadi and R. M. Needham},

   title		= {A Logic of Authentication},

   journal	= PROYAL,

   year		= 1989,

   volume	= 426,

   pages		= {233-271}}

 %C

 @TechReport{camilleri92,

   author	= {J. Camilleri and T. F. Melham},

   title		= {Reasoning with Inductively Defined Relations in the

 		 {HOL} Theorem Prover},

   institution	= CUCL,

   year		= 1992,

   number	= 265,

   month		= Aug}

 @Book{charniak80,

   author	= {E. Charniak and C. K. Riesbeck and D. V. McDermott},

   title		= {Artificial Intelligence Programming},

   publisher	= {Lawrence Erlbaum Associates},

   year		= 1980}

 @article{church40,

   author	= "Alonzo Church",

   title		= "A Formulation of the Simple Theory of Types",

   journal	= JSL,

   year		= 1940,

   volume	= 5,

   pages		= "56-68"}

 @book{ClarkeGP-book,author="Edmund Clarke and Orna Grumberg and Doron Peled",

 title="Model Checking",publisher=MIT,year=1999}

 @PhdThesis{coen92,

   author	= {Martin D. Coen},

   title		= {Interactive Program Derivation},

   school	= {University of Cambridge},

   note		= {Computer Laboratory Technical Report 272},

   month		= nov,

   year		= 1992}

 @book{constable86,

   author	= {R. L. Constable and others},

   title		= {Implementing Mathematics with the Nuprl Proof

 		 Development System}, 

   publisher	= Prentice,

   year		= 1986}

 %D

 @Book{davey-priestley,

   author	= {B. A. Davey and H. A. Priestley},

   title		= {Introduction to Lattices and Order},

   publisher	= CUP,

   year		= 1990}

 @Book{devlin79,

   author	= {Keith J. Devlin},

   title		= {Fundamentals of Contemporary Set Theory},

   publisher	= {Springer},

   year		= 1979}

 @book{dummett,

   author	= {Michael Dummett},

   title		= {Elements of Intuitionism},

   year		= 1977,

   publisher	= {Oxford University Press}}

 @incollection{dybjer91,

   author	= {Peter Dybjer},

   title		= {Inductive Sets and Families in {Martin-L{\"o}f's} Type

 		  Theory and Their Set-Theoretic Semantics}, 

   crossref	= {huet-plotkin91},

   pages		= {280-306}}

 @Article{dyckhoff,

   author	= {Roy Dyckhoff},

   title		= {Contraction-Free Sequent Calculi for Intuitionistic Logic},

   journal	= JSL,

   year		= 1992,

   volume	= 57,

   number	= 3,

   pages		= {795-807}}

 %F

 @Article{IMPS,

   author	= {William M. Farmer and Joshua D. Guttman and F. Javier

 		 Thayer},

   title		= {{IMPS}: An Interactive Mathematical Proof System},

   journal	= JAR,

   volume	= 11,

   number	= 2,

   year		= 1993,

   pages		= {213-248}}

 @InProceedings{felty91a,

   Author	= {Amy Felty},

   Title		= {A Logic Program for Transforming Sequent Proofs to Natural

 		  Deduction Proofs}, 

   crossref	= {extensions91},

   pages		= {157-178}}

 @Article{fleuriot-jcm,

   author = 	 {Jacques Fleuriot and Lawrence C. Paulson},

   title = 	 {Mechanizing Nonstandard Real Analysis},

   journal = 	 {LMS Journal of Computation and Mathematics},

   year = 	 2000,

   volume =	 3,

   pages =	 {140-190},

   note =	 {\url{http://www.lms.ac.uk/jcm/3/lms1999-027/}}

 }

 @TechReport{frost93,

   author	= {Jacob Frost},

   title		= {A Case Study of Co-induction in {Isabelle HOL}},

   institution	= CUCL,

   number	= 308,

   year		= 1993,

   month		= Aug}

 %revised version of frost93

 @TechReport{frost95,

   author	= {Jacob Frost},

   title		= {A Case Study of Co-induction in {Isabelle}},

   institution	= CUCL,

   number	= 359,

   year		= 1995,

   month		= Feb}

 @inproceedings{OBJ,

   author	= {K. Futatsugi and J.A. Goguen and Jean-Pierre Jouannaud

 		 and J. Meseguer}, 

   title		= {Principles of {OBJ2}},

   booktitle	= POPL, 

   year		= 1985,

   pages		= {52-66}}

 %G

 @book{gallier86,

   author	= {J. H. Gallier},

   title		= {Logic for Computer Science: 

 		Foundations of Automatic Theorem Proving},

   year		= 1986,

   publisher	= {Harper \& Row}}

 @Book{galton90,

   author	= {Antony Galton},

   title		= {Logic for Information Technology},

   publisher	= {Wiley},

   year		= 1990}

 @InProceedings{gimenez-codifying,

   author	= {Eduardo Gim{\'e}nez},

   title		= {Codifying Guarded Definitions with Recursive Schemes},

   crossref	= {types94},

   pages		= {39-59}

 }

 @book{girard89,

   author	= {Jean-Yves Girard},

   title		= {Proofs and Types},

   year		= 1989,

   publisher	= CUP, 

   note		= {Translated by Yves LaFont and Paul Taylor}}

 @Book{mgordon-hol,

   editor	= {M. J. C. Gordon and T. F. Melham},

   title		= {Introduction to {HOL}: A Theorem Proving Environment for

 		 Higher Order Logic},

   publisher	= CUP,

   year		= 1993}

 @book{mgordon79,

   author	= {Michael J. C. Gordon and Robin Milner and Christopher P.

 		 Wadsworth},

   title		= {Edinburgh {LCF}: A Mechanised Logic of Computation},

   year		= 1979,

   publisher	= {Springer},

   series	= {LNCS 78}}

 @inproceedings{Gunter-HOL92,author={Elsa L. Gunter},

 title={Why we can't have {SML} style datatype declarations in {HOL}},

 booktitle={Higher Order Logic Theorem Proving and its Applications: Proc.\

 IFIP TC10/WG10.2 Intl. Workshop, 1992},

 editor={L.J.M. Claesen and M.J.C. Gordon},

 publisher=NH,year=1993,pages={561--568}}

 @InProceedings{gunter-trees,

   author	= {Elsa L. Gunter},

   title		= {A Broader Class of Trees for Recursive Type Definitions for

 		  {HOL}},

   crossref	= {hug93},

   pages		= {141-154}}

 %H

 @Book{halmos60,

   author	= {Paul R. Halmos},

   title		= {Naive Set Theory},

   publisher	= {Van Nostrand},

   year		= 1960}

 @book{HarelKT-DL,author={David Harel and Dexter Kozen and Jerzy Tiuryn},

 title={Dynamic Logic},publisher=MIT,year=2000}

 @Book{hennessy90,

   author	= {Matthew Hennessy},

   title		= {The Semantics of Programming Languages: An Elementary

 		  Introduction Using Structural Operational Semantics},

   publisher	= {Wiley},

   year		= 1990}

 @book{HopcroftUllman,author={John E. Hopcroft and Jeffrey D. Ullman},

 title={Introduction to Automata Theory, Languages, and Computation.},

 publisher={Addison-Wesley},year=1979}

 @Article{haskell-report,

   author	= {Paul Hudak and Simon Peyton Jones and Philip Wadler},

   title		= {Report on the Programming Language {Haskell}: A

 		 Non-strict, Purely Functional Language},

   journal	= SIGPLAN,

   year		= 1992,

   volume	= 27,

   number	= 5,

   month		= May,

   note		= {Version 1.2}}

 @Article{haskell-tutorial,

   author	= {Paul Hudak and Joseph H. Fasel},

   title		= {A Gentle Introduction to {Haskell}},

   journal	= SIGPLAN,

   year		= 1992,

   volume	= 27,

   number	= 5,

   month		= May}

 @book{Hudak-Haskell,author={Paul Hudak},

 title={The Haskell School of Expression},publisher=CUP,year=2000}

 @article{huet75,

   author	= {G. P. Huet},

   title		= {A Unification Algorithm for Typed $\lambda$-Calculus},

   journal	= TCS,

   volume	= 1,

   year		= 1975,

   pages		= {27-57}}

 @article{huet78,

   author	= {G. P. Huet and B. Lang},

   title		= {Proving and Applying Program Transformations Expressed with 

 			Second-Order Patterns},

   journal	= acta,

   volume	= 11,

   year		= 1978, 

   pages		= {31-55}}

 @inproceedings{huet88,

   author	= {G{\'e}rard Huet},

   title		= {Induction Principles Formalized in the {Calculus of

 		 Constructions}}, 

   booktitle	= {Programming of Future Generation Computers},

   editor	= {K. Fuchi and M. Nivat},

   year		= 1988,

   pages		= {205-216}, 

   publisher	= {Elsevier}}

 @Book{Huth-Ryan-book,

   author	= {Michael Huth and Mark Ryan},

   title		= {Logic in Computer Science. Modelling and reasoning about systems},

   publisher	= CUP,

   year		= 2000}

 @InProceedings{Harrison:1996:MizarHOL,

   author = 	 {J. Harrison},

   title = 	 {A {Mizar} Mode for {HOL}},

   pages =	 {203--220},

   crossref =     {tphols96}}

 %K

 @InProceedings{kammueller-locales,

   author = 	 {Florian Kamm{\"u}ller and Markus Wenzel and 

                   Lawrence C. Paulson},

   title = 	 {Locales: A Sectioning Concept for {Isabelle}},

   crossref =	 {tphols99}}

 @book{Knuth3-75,

   author={Donald E. Knuth},

   title={The Art of Computer Programming, Volume 3: Sorting and Searching},

   publisher={Addison-Wesley},

   year=1975}

 @Article{korf85,

   author	= {R. E. Korf},

   title		= {Depth-First Iterative-Deepening: an Optimal Admissible

 		 Tree Search},

   journal	= AI,

   year		= 1985,

   volume	= 27,

   pages		= {97-109}}

 @Book{kunen80,

   author	= {Kenneth Kunen},

   title		= {Set Theory: An Introduction to Independence Proofs},

   publisher	= NH,

   year		= 1980}

 %L

 @InProceedings{lowe-fdr,

   author	= {Gavin Lowe},

   title		= {Breaking and Fixing the {Needham}-{Schroeder} Public-Key

 		  Protocol using {CSP} and {FDR}},

   booktitle = 	 {Tools and Algorithms for the Construction and Analysis 

                   of Systems:  second international workshop, TACAS '96},

   editor =	 {T. Margaria and B. Steffen},

   series =	 {LNCS 1055},

   year =	 1996,

   publisher =	 {Springer},

   pages		= {147-166}}

 %M

 @Article{mw81,

   author	= {Zohar Manna and Richard Waldinger},

   title		= {Deductive Synthesis of the Unification Algorithm},

   journal	= SCP,

   year		= 1981,

   volume	= 1,

   number	= 1,

   pages		= {5-48}}

 @InProceedings{martin-nipkow,

   author	= {Ursula Martin and Tobias Nipkow},

   title		= {Ordered Rewriting and Confluence},

   crossref	= {cade10},

   pages		= {366-380}}

 @book{martinlof84,

   author	= {Per Martin-L{\"o}f},

   title		= {Intuitionistic type theory},

   year		= 1984,

   publisher	= {Bibliopolis}}

 @incollection{melham89,

   author	= {Thomas F. Melham},

   title		= {Automating Recursive Type Definitions in Higher Order

 		 Logic}, 

   pages		= {341-386},

   crossref	= {birtwistle89}}

 @Article{miller-mixed,

   Author	= {Dale Miller},

   Title		= {Unification Under a Mixed Prefix},

   journal	= JSC,

   volume	= 14,

   number	= 4,

   pages		= {321-358},

   Year		= 1992}

 @Article{milner78,

   author	= {Robin Milner},

   title		= {A Theory of Type Polymorphism in Programming},

   journal	= "J. Comp.\ Sys.\ Sci.",

   year		= 1978,

   volume	= 17,

   pages		= {348-375}}

 @TechReport{milner-ind,

   author	= {Robin Milner},

   title		= {How to Derive Inductions in {LCF}},

   institution	= Edinburgh,

   year		= 1980,

   type		= {note}}

 @Article{milner-coind,

   author	= {Robin Milner and Mads Tofte},

   title		= {Co-induction in Relational Semantics},

   journal	= TCS,

   year		= 1991,

   volume	= 87,

   pages		= {209-220}}

 @Book{milner89,

   author	= {Robin Milner},

   title		= {Communication and Concurrency},

   publisher	= Prentice,

   year		= 1989}

 @book{SML,author="Robin Milner and Mads Tofte and Robert Harper",

 title="The Definition of Standard ML",publisher=MIT,year=1990}

 @PhdThesis{monahan84,

   author	= {Brian Q. Monahan},

   title		= {Data Type Proofs using Edinburgh {LCF}},

   school	= {University of Edinburgh},

   year		= 1984}

 @article{MuellerNvOS99,

 author=

 {Olaf M{\"u}ller and Tobias Nipkow and Oheimb, David von and Oscar Slotosch},

 title={{HOLCF = HOL + LCF}},journal=JFP,year=1999,volume=9,pages={191--223}}

 @Manual{Muzalewski:Mizar,

   title = 	 {An Outline of {PC} {Mizar}},

   author =	 {Micha{\l} Muzalewski},

   organization = {Fondation of Logic, Mathematics and Informatics

                   --- Mizar Users Group},

   year =	 1993,

   note =	 {\url{http://www.cs.kun.nl/~freek/mizar/mizarmanual.ps.gz}}

 }

 %N

 @InProceedings{NaraschewskiW-TPHOLs98,

   author	= {Wolfgang Naraschewski and Markus Wenzel},

   title		= 

 {Object-Oriented Verification based on Record Subtyping in

                   Higher-Order Logic},

   crossref      = {tphols98}}

 @inproceedings{nazareth-nipkow,

   author	= {Dieter Nazareth and Tobias Nipkow},

   title		= {Formal Verification of Algorithm {W}: The Monomorphic Case},

   crossref	= {tphols96},

   pages		= {331-345},

   year		= 1996}

 @Article{needham-schroeder,

   author =       "Roger M. Needham and Michael D. Schroeder",

   title =        "Using Encryption for Authentication in Large Networks

                  of Computers",

   journal =      cacm,

   volume =       21,

   number =       12,

   pages =        "993-999",

   month =        dec,

   year =         1978}

 @inproceedings{nipkow-W,

   author	= {Wolfgang Naraschewski and Tobias Nipkow},

   title		= {Type Inference Verified: Algorithm {W} in {Isabelle/HOL}},

   booktitle	= {Types for Proofs and Programs: Intl. Workshop TYPES '96},

   editor	= {E. Gim{\'e}nez and C. Paulin-Mohring},

   publisher	= Springer,

   series	= LNCS,

   volume	= 1512,

   pages		= {317-332},

   year		= 1998}

 @InCollection{nipkow-sorts93,

   author = 	 {T. Nipkow},

   title = 	 {Order-Sorted Polymorphism in {Isabelle}},

   booktitle = 	 {Logical Environments},

   publisher =	 CUP,

   year =	 1993,

   editor =	 {G. Huet and G. Plotkin},

   pages =	 {164--188}

 }

 @Misc{nipkow-types93,

   author =	 {Tobias Nipkow},

   title =	 {Axiomatic Type Classes (in {I}sabelle)},

   howpublished = {Presentation at the workshop \emph{Types for Proof and Programs}, Nijmegen},

   year =	 1993

 }

 @inproceedings{Nipkow-CR,

   author	= {Tobias Nipkow},

   title		= {More {Church-Rosser} Proofs (in {Isabelle/HOL})},

   booktitle	= {Automated Deduction --- CADE-13},

   editor	= {M. McRobbie and J.K. Slaney},

   publisher	= Springer,

   series	= LNCS,

   volume	= 1104,

   pages		= {733-747},

   year		= 1996}

 % WAS Nipkow-LICS-93

 @InProceedings{nipkow-patterns,

   title		= {Functional Unification of Higher-Order Patterns},

   author	= {Tobias Nipkow},

   pages		= {64-74},

   crossref	= {lics8},

   url		= {\url{ftp://ftp.informatik.tu-muenchen.de/local/lehrstuhl/nipkow/lics93.html}},

   keywords	= {unification}}

 @article{nipkow-IMP,

   author	= {Tobias Nipkow},

   title		= {Winskel is (almost) Right: Towards a Mechanized Semantics Textbook},

   journal	= FAC,

   volume	= 10,

   pages		= {171-186},

   year		= 1998}

 @manual{isabelle-HOL,

   author	= {Tobias Nipkow and Lawrence C. Paulson and Markus Wenzel},

   title		= {{Isabelle}'s Logics: {HOL}},

   institution	= {Institut f{\"u}r Informatik, Technische Universi{\"a}t

                   M{\"u}nchen and Computer Laboratory, University of Cambridge},

   note          = {\url{http://isabelle.in.tum.de/doc/logics-HOL.pdf}}}

 @article{nipkow-prehofer,

   author	= {Tobias Nipkow and Christian Prehofer},

   title		= {Type Reconstruction for Type Classes},

   journal	= JFP,

   volume	= 5,

   number	= 2,

   year		= 1995,

   pages		= {201-224}}

 @Article{noel,

   author	= {Philippe No{\"e}l},

   title		= {Experimenting with {Isabelle} in {ZF} Set Theory},

   journal	= JAR,

   volume	= 10,

   number	= 1,

   pages		= {15-58},

   year		= 1993}

 @book{nordstrom90,

   author	= {Bengt {Nordstr{\"o}m} and Kent Petersson and Jan Smith},

   title		= {Programming in {Martin-L{\"o}f}'s Type Theory.  An

 		 Introduction}, 

   publisher	= {Oxford University Press}, 

   year		= 1990}

 %O

 @Manual{pvs-language,

   title		= {The {PVS} specification language},

   author	= {S. Owre and N. Shankar and J. M. Rushby},

   organization	= {Computer Science Laboratory, SRI International},

   address	= {Menlo Park, CA},

   note          = {Beta release},

   year		= 1993,

   month		= apr,

   url		= {\url{http://www.csl.sri.com/reports/pvs-language.dvi.Z}}}

 %P

 % replaces paulin92

 @InProceedings{paulin-tlca,

   author	= {Christine Paulin-Mohring},

   title		= {Inductive Definitions in the System {Coq}: Rules and

 		 Properties},

   crossref	= {tlca93},

   pages		= {328-345}}

 @InProceedings{paulson-CADE,

   author	= {Lawrence C. Paulson},

   title		= {A Fixedpoint Approach to Implementing (Co)Inductive

 		  Definitions},

   pages		= {148-161},

   crossref	= {cade12}}

 @InProceedings{paulson-COLOG,

   author	= {Lawrence C. Paulson},

   title		= {A Formulation of the Simple Theory of Types (for

 		 {Isabelle})}, 

   pages		= {246-274},

   crossref	= {colog88},

   url		= {\url{http://www.cl.cam.ac.uk/Research/Reports/TR175-lcp-simple.dvi.gz}}}

 @Article{paulson-coind,

   author	= {Lawrence C. Paulson},

   title		= {Mechanizing Coinduction and Corecursion in Higher-Order

 		  Logic},

   journal	= JLC,

   year		= 1997,

   volume	= 7,

   number	= 2,

   month		= mar,

   pages		= {175-204}}

 @manual{isabelle-ref,

   author	= {Lawrence C. Paulson},

   title		= {The {Isabelle} Reference Manual},

   institution	= CUCL,

   note          = {\url{http://isabelle.in.tum.de/doc/ref.pdf}}}

 @manual{isabelle-ZF,

   author	= {Lawrence C. Paulson},

   title		= {{Isabelle}'s Logics: {FOL} and {ZF}},

   institution	= CUCL,

   note          = {\url{http://isabelle.in.tum.de/doc/logics-ZF.pdf}}}

 @article{paulson-found,

   author	= {Lawrence C. Paulson},

   title		= {The Foundation of a Generic Theorem Prover},

   journal	= JAR,

   volume	= 5,

   number	= 3,

   pages		= {363-397},

   year		= 1989,

   url		= {\url{http://www.cl.cam.ac.uk/Research/Reports/TR130-lcp-generic-theorem-prover.dvi.gz}}}

 %replaces paulson-final

 @Article{paulson-mscs,

   author	= {Lawrence C. Paulson},

   title = 	 {Final Coalgebras as Greatest Fixed Points 

                   in {ZF} Set Theory},

   journal	= {Mathematical Structures in Computer Science},

   year		= 1999,

   volume	= 9,

   note		= {in press}}

 @InCollection{paulson-generic,

   author	= {Lawrence C. Paulson},

   title		= {Generic Automatic Proof Tools},

   crossref	= {wos-fest},

   chapter	= 3}

 @Article{paulson-gr,

   author	= {Lawrence C. Paulson and Krzysztof Gr\c{a}bczewski},

   title		= {Mechanizing Set Theory: Cardinal Arithmetic and the Axiom of

 		  Choice},

   journal	= JAR,

   year		= 1996,

   volume	= 17,

   number	= 3,

   month		= dec,

   pages		= {291-323}}

 @InCollection{paulson-handbook,

   author	= {Lawrence C. Paulson},

   title		= {Designing a Theorem Prover},

   crossref	= {handbk-lics2},

   pages		= {415-475}}

 @Book{paulson-isa-book,

   author	= {Lawrence C. Paulson},

   title		= {Isabelle: A Generic Theorem Prover},

   publisher	= {Springer},

   year		= 1994,

   note		= {LNCS 828}}

 @InCollection{paulson-markt,

   author	= {Lawrence C. Paulson},

   title		= {Tool Support for Logics of Programs},

   booktitle	= {Mathematical Methods in Program Development:

                   Summer School Marktoberdorf 1996},

   publisher	= {Springer},

   pages		= {461-498},

   year		= {Published 1997},

   editor	= {Manfred Broy},

   series	= {NATO ASI Series F}}

 %replaces Paulson-ML and paulson91

 @book{paulson-ml2,

   author	= {Lawrence C. Paulson},

   title		= {{ML} for the Working Programmer},

   year		= 1996,

   edition	= {2nd},

   publisher	= CUP}

 @article{paulson-natural,

   author	= {Lawrence C. Paulson},

   title		= {Natural Deduction as Higher-order Resolution},

   journal	= JLP,

   volume	= 3,

   pages		= {237-258},

   year		= 1986,

   url		= {\url{http://www.cl.cam.ac.uk/Research/Reports/TR82-lcp-higher-order-resolution.dvi.gz}}}

 @Article{paulson-set-I,

   author	= {Lawrence C. Paulson},

   title		= {Set Theory for Verification: {I}.  {From}

 		 Foundations to Functions},

   journal	= JAR,

   volume	= 11,

   number	= 3,

   pages		= {353-389},

   year		= 1993,

   url		= {\url{ftp://ftp.cl.cam.ac.uk/ml/set-I.ps.gz}}}

 @Article{paulson-set-II,

   author	= {Lawrence C. Paulson},

   title		= {Set Theory for Verification: {II}.  {Induction} and

 		 Recursion},

   journal	= JAR,

   volume	= 15,

   number	= 2,

   pages		= {167-215},

   year		= 1995,

   url		= {\url{http://www.cl.cam.ac.uk/Research/Reports/TR312-lcp-set-II.ps.gz}}}

 @article{paulson85,

   author	= {Lawrence C. Paulson},

   title		= {Verifying the Unification Algorithm in {LCF}},

   journal	= SCP,

   volume	= 5,

   pages		= {143-170},

   year		= 1985}

 %replaces Paulson-LCF

 @book{paulson87,

   author	= {Lawrence C. Paulson},

   title		= {Logic and Computation: Interactive proof with Cambridge

 		 LCF}, 

   year		= 1987,

   publisher	= CUP}

 @incollection{paulson700,

   author	= {Lawrence C. Paulson},

   title		= {{Isabelle}: The Next 700 Theorem Provers},

   crossref	= {odifreddi90},

   pages		= {361-386},

   url		= {\url{http://www.cl.cam.ac.uk/Research/Reports/TR143-lcp-experience.dvi.gz}}}

 % replaces paulson-ns and paulson-security

 @Article{paulson-jcs,

   author	= {Lawrence C. Paulson},

   title		= {The Inductive Approach to Verifying Cryptographic Protocols},

   journal	= JCS,

   year		= 1998,

   volume	= 6,

   pages		= {85-128}}

 @Article{paulson-tls,

   author = 	 {Lawrence C. Paulson},

   title = 	 {Inductive Analysis of the {Internet} Protocol {TLS}},

   journal = 	 TISSEC,

   month =        aug,

   year = 	 1999,

   volume	= 2,

   number        = 3,

   pages		= {332-351}}

 @Article{paulson-yahalom,

   author = 	 {Lawrence C. Paulson},

   title = 	 {Relations Between Secrets:

                   Two Formal Analyses of the {Yahalom} Protocol},

   journal = 	 JCS,

   note =	 {in press}}

 @article{pelletier86,

   author	= {F. J. Pelletier},

   title		= {Seventy-five Problems for Testing Automatic Theorem

 		 Provers}, 

   journal	= JAR,

   volume	= 2,

   pages		= {191-216},

   year		= 1986,

   note		= {Errata, JAR 4 (1988), 235--236 and JAR 18 (1997), 135}}

 @Article{pitts94,  

   author	= {Andrew M. Pitts},

   title		= {A Co-induction Principle for Recursively Defined Domains},

   journal	= TCS,

   volume	= 124, 

   pages		= {195-219},

   year		= 1994} 

 @Article{plaisted90,

   author	= {David A. Plaisted},

   title		= {A Sequent-Style Model Elimination Strategy and a Positive

 		 Refinement},

   journal	= JAR,

   year		= 1990,

   volume	= 6,

   number	= 4,

   pages		= {389-402}}

 %Q

 @Article{quaife92,

   author	= {Art Quaife},

   title		= {Automated Deduction in {von Neumann-Bernays-G\"{o}del} Set

 		 Theory},

   journal	= JAR,

   year		= 1992,

   volume	= 8,

   number	= 1,

   pages		= {91-147}}

 %R

 @TechReport{rasmussen95,

   author	= {Ole Rasmussen},

   title		= {The {Church-Rosser} Theorem in {Isabelle}: A Proof Porting

 		  Experiment},

   institution	= {Computer Laboratory, University of Cambridge},

   year		= 1995,

   number	= 364,

   month		= may,

   url		= {\url{http://www.cl.cam.ac.uk:80/ftp/papers/reports/TR364-or200-church-rosser-isabelle.ps.gz}}}

 @Book{reeves90,

   author	= {Steve Reeves and Michael Clarke},

   title		= {Logic for Computer Science},

   publisher	= {Addison-Wesley},

   year		= 1990}

 @book{Rosen-DMA,author={Kenneth H. Rosen},

 title={Discrete Mathematics and Its Applications},

 publisher={McGraw-Hill},year=1998}

 @InProceedings{Rudnicki:1992:MizarOverview,

   author = 	 {P. Rudnicki},

   title = 	 {An Overview of the {MIZAR} Project},

   booktitle = 	 {1992 Workshop on Types for Proofs and Programs},

   year =	 1992,

   organization = {Chalmers University of Technology},

   publisher =	 {Bastad}

 }

 %S

 @inproceedings{saaltink-fme,

   author	= {Mark Saaltink and Sentot Kromodimoeljo and Bill Pase and

 		 Dan Craigen and Irwin Meisels},

   title		= {An {EVES} Data Abstraction Example}, 

   pages		= {578-596},

   crossref	= {fme93}}

 @inproceedings{slind-tfl,

   author	= {Konrad Slind},

   title		= {Function Definition in Higher Order Logic},

   booktitle	= {Theorem Proving in Higher Order Logics},

   editor	= {J. von Wright and J. Grundy and J. Harrison},

   publisher	= Springer,

   series	= LNCS,

   volume	= 1125,

   pages		= {381-397},

   year		= 1996}

 @book{suppes72,

   author	= {Patrick Suppes},

   title		= {Axiomatic Set Theory},

   year		= 1972,

   publisher	= {Dover}}

 @InCollection{szasz93,

   author	= {Nora Szasz},

   title		= {A Machine Checked Proof that {Ackermann's} Function is not

 		  Primitive Recursive},

   crossref	= {huet-plotkin93},

   pages		= {317-338}}

 @TechReport{Syme:1997:DECLARE,

   author = 	 {D. Syme},

   title = 	 {{DECLARE}: A Prototype Declarative Proof System for Higher Order Logic},

   institution =  {University of Cambridge Computer Laboratory},

   year = 	 1997,

   number =	 416

 }

 @PhdThesis{Syme:1998:thesis,

   author = 	 {D. Syme},

   title = 	 {Declarative Theorem Proving for Operational Semantics},

   school = 	 {University of Cambridge},

   year = 	 1998,

   note =	 {Submitted}

 }

 @InProceedings{Syme:1999:TPHOL,

   author = 	 {D. Syme},

   title = 	 {Three Tactic Theorem Proving},

   crossref =     {tphols99}}

 %T

 @book{takeuti87,

   author	= {G. Takeuti},

   title		= {Proof Theory},

   year		= 1987,

   publisher	= NH,

   edition	= {2nd}}

 @Book{thompson91,

   author	= {Simon Thompson},

   title		= {Type Theory and Functional Programming},

   publisher	= {Addison-Wesley},

   year		= 1991}

 @book{Thompson-Haskell,author={Simon Thompson},

 title={Haskell: The Craft of Functional Programming},

 publisher={Addison-Wesley},year=1999}

 @Unpublished{Trybulec:1993:MizarFeatures,

   author = 	 {A. Trybulec},

   title = 	 {Some Features of the {Mizar} Language},

   note = 	 {Presented at a workshop in Turin, Italy},

   year =	 1993

 }

 %V

 @Unpublished{voelker94,

   author	= {Norbert V{\"o}lker},

   title		= {The Verification of a Timer Program using {Isabelle/HOL}},

   url		= {\url{ftp://ftp.fernuni-hagen.de/pub/fachb/et/dvt/projects/verification/timer.tar.gz}},

   year		= 1994,

   month		= aug}

 %W

 @Misc{x-symbol,

   author =	 {Christoph Wedler},

   title =	 {Emacs package ``{X-Symbol}''},

   note =	 {\url{http://www.fmi.uni-passau.de/~wedler/x-symbol/}}

 }

 @manual{isabelle-sys,

   author	= {Markus Wenzel and Stefan Berghofer},

   title		= {The {Isabelle} System Manual},

   institution	= {TU Munich},

   note          = {\url{http://isabelle.in.tum.de/doc/system.pdf}}}

 @manual{isabelle-isar-ref,

   author	= {Markus Wenzel},

   title		= {The {Isabelle/Isar} Reference Manual},

   institution	= {TU Munich},

   note          = {\url{http://isabelle.in.tum.de/doc/isar-ref.pdf}}}

 @manual{isabelle-axclass,

   author	= {Markus Wenzel},

   title		= {Using Axiomatic Type Classes in {I}sabelle},

   institution	= {TU Munich},

   year          = 2000,

   note          = {\url{http://isabelle.in.tum.de/doc/axclass.pdf}}}

 @InProceedings{Wenzel:1999:TPHOL,

   author = 	 {Markus Wenzel},

   title = 	 {{Isar} --- a Generic Interpretative Approach to Readable Formal Proof Documents},

   crossref =     {tphols99}}

 @InProceedings{Wenzel:1997:TPHOL,

   author = 	 {Markus Wenzel},

   title = 	 {Type Classes and Overloading in Higher-Order Logic},

   crossref =     {tphols97}}

 @phdthesis{Wenzel-PhD,author={Markus Wenzel},title={Isabelle/Isar ---

 a versatile environment for human-readable formal proof documents},

 school={Institut f{\"u}r Informatik, Technische Universit{\"a}t M{\"u}nchen},year=2002}

 @book{principia,

   author	= {A. N. Whitehead and B. Russell},

   title		= {Principia Mathematica},

   year		= 1962,

   publisher	= CUP, 

   note		= {Paperback edition to *56,

   abridged from the 2nd edition (1927)}}

 @Misc{Wiedijk:1999:Mizar,

   author =	 {Freek Wiedijk},

   title =	 {Mizar: An Impression},

   howpublished = {Unpublished paper},

   year =         1999,

   note =	 {\url{http://www.cs.kun.nl/~freek/mizar/mizarintro.ps.gz}}

 }

 @Misc{Wiedijk:2000:MV,

   author =	 {Freek Wiedijk},

   title =	 {The Mathematical Vernacular},

   howpublished = {Unpublished paper},

   year =         2000,

   note =	 {\url{http://www.cs.kun.nl/~freek/notes/mv.ps.gz}}

 }

 @book{winskel93,

   author	= {Glynn Winskel},

   title		= {The Formal Semantics of Programming Languages},

   publisher	= MIT,year=1993}

 @InCollection{wos-bledsoe,

   author	= {Larry Wos},

   title		= {Automated Reasoning and {Bledsoe's} Dream for the Field},

   crossref	= {bledsoe-fest},

   pages		= {297-342}}

 @InProceedings{Zammit:1999:TPHOL,

   author = 	 {Vincent Zammit},

   title = 	 {On the Implementation of an Extensible Declarative Proof Language},

   crossref =     {tphols99}}

 %Z

 % CROSS REFERENCES

 @book{handbk-lics2,

   editor	= {S. Abramsky and D. M. Gabbay and T. S. E. Maibaum},

   title		= {Handbook of Logic in Computer Science},

   booktitle	= {Handbook of Logic in Computer Science},

   publisher	= {Oxford University Press},

   year		= 1992,

   volume	= 2}

 @book{types93,

   editor	= {Henk Barendregt and Tobias Nipkow},

   title		= TYPES # {: International Workshop {TYPES '93}},

   booktitle	= TYPES # {: International Workshop {TYPES '93}},

   year		= {published 1994},

   publisher	= {Springer},

   series	= {LNCS 806}}

 @book{barwise-handbk,

   editor	= {J. Barwise},

   title		= {Handbook of Mathematical Logic},

   booktitle	= {Handbook of Mathematical Logic},

   year		= 1977,

   publisher	= NH}

 @Proceedings{tlca93,

   title		= {Typed Lambda Calculi and Applications},

   booktitle	= {Typed Lambda Calculi and Applications},

   editor	= {M. Bezem and J.F. Groote},

   year		= 1993,

   publisher	= {Springer},

   series	= {LNCS 664}}

 @book{birtwistle89,

   editor	= {Graham Birtwistle and P. A. Subrahmanyam},

   title		= {Current Trends in Hardware Verification and Automated

 		 Theorem Proving}, 

   booktitle	= {Current Trends in Hardware Verification and Automated

 		 Theorem Proving}, 

   publisher	= {Springer},

   year		= 1989}

 @book{bledsoe-fest,

   title		= {Automated Reasoning: Essays in Honor of {Woody Bledsoe}},

   booktitle	= {Automated Reasoning: Essays in Honor of {Woody Bledsoe}},

   publisher	= {Kluwer Academic Publishers},

   year		= 1991,

   editor	= {Robert S. Boyer}}

 @Proceedings{cade12,

   editor	= {Alan Bundy},

   title		= {Automated Deduction --- {CADE}-12 

 		  International Conference},

   booktitle	= {Automated Deduction --- {CADE}-12 

 		  International Conference},

   year		= 1994,

   series	= {LNAI 814},

   publisher	= {Springer}}

 @book{types94,

   editor	= {Peter Dybjer and Bengt Nordstr{{\"o}m} and Jan Smith},

   title		= TYPES # {: International Workshop {TYPES '94}},

   booktitle	= TYPES # {: International Workshop {TYPES '94}},

   year		= 1995,

   publisher	= {Springer},

   series	= {LNCS 996}}

 @book{huet-plotkin91,

   editor	= {{G{\'e}rard} Huet and Gordon Plotkin},

   title		= {Logical Frameworks},

   booktitle	= {Logical Frameworks},

   publisher	= CUP,

   year		= 1991}

 @book{huet-plotkin93,

   editor	= {{G{\'e}rard} Huet and Gordon Plotkin},

   title		= {Logical Environments},

   booktitle	= {Logical Environments},

   publisher	= CUP,

   year		= 1993}

 @Proceedings{hug93,

   editor	= {J. Joyce and C. Seger},

   title		= {Higher Order Logic Theorem Proving and Its

 		  Applications: HUG '93},

   booktitle	= {Higher Order Logic Theorem Proving and Its

 		  Applications: HUG '93},

   year		= {Published 1994},

   publisher	= {Springer},

   series	= {LNCS 780}}

 @proceedings{colog88,

   editor	= {P. Martin-L{\"o}f and G. Mints},

   title		= {COLOG-88: International Conference on Computer Logic},

   booktitle	= {COLOG-88: International Conference on Computer Logic},

   year		= {Published 1990},

   publisher	= {Springer},

   organization	= {Estonian Academy of Sciences},

   address	= {Tallinn},

   series	= {LNCS 417}}

 @book{odifreddi90,

   editor	= {P. Odifreddi},

   title		= {Logic and Computer Science},

   booktitle	= {Logic and Computer Science},

   publisher	= {Academic Press},

   year		= 1990}

 @proceedings{extensions91,

   editor	= {Peter Schroeder-Heister},

   title		= {Extensions of Logic Programming},

   booktitle	= {Extensions of Logic Programming},

   year		= 1991,

   series	= {LNAI 475}, 

   publisher	= {Springer}}

 @proceedings{cade10,

   editor	= {Mark E. Stickel},

   title		= {10th } # CADE,

   booktitle	= {10th } # CADE,

   year		= 1990,

   publisher	= {Springer},

   series	= {LNAI 449}}

 @Proceedings{lics8,

   editor	= {M. Vardi},

   title		= {Eighth Annual Symposium on Logic in Computer Science},

   booktitle	= {Eighth Annual Symposium on Logic in Computer Science},

   publisher	= IEEE,

   year		= 1993}

 @book{wos-fest,

   title		= {Automated Reasoning and its Applications: 

 			Essays in Honor of {Larry Wos}},

   booktitle	= {Automated Reasoning and its Applications: 

 			Essays in Honor of {Larry Wos}},

   publisher	= {MIT Press},

   year		= 1997,

   editor	= {Robert Veroff}}

 @proceedings{fme93,

   editor	= {J. C. P. Woodcock and P. G. Larsen},

   title		= {FME '93: Industrial-Strength Formal Methods},

   booktitle	= {FME '93: Industrial-Strength Formal Methods},

   year		= 1993,

   publisher	= {Springer},

   series	= {LNCS 670}}

 @Proceedings{tphols96,

   title		= {Theorem Proving in Higher Order Logics: {TPHOLs} '96},

   booktitle	= {Theorem Proving in Higher Order Logics: {TPHOLs} '96},

   editor	= {J. von Wright and J. Grundy and J. Harrison},

   series	= {LNCS 1125},

   year		= 1996}

 @Proceedings{tphols97,

   title		= {Theorem Proving in Higher Order Logics: {TPHOLs} '97},

   booktitle	= {Theorem Proving in Higher Order Logics: {TPHOLs} '97},

   editor	= {Elsa L. Gunter and Amy Felty},

   series	= {LNCS 1275},

   year		= 1997}

 @Proceedings{tphols98,

   title		= {Theorem Proving in Higher Order Logics: {TPHOLs} '98},

   booktitle	= {Theorem Proving in Higher Order Logics: {TPHOLs} '98},

   editor	= {Jim Grundy and Malcom Newey},

   series	= {LNCS 1479},

   year		= 1998}

 @Proceedings{tphols99,

   title		= {Theorem Proving in Higher Order Logics: {TPHOLs} '99},

   booktitle	= {Theorem Proving in Higher Order Logics: {TPHOLs} '99},

   editor	= {Bertot, Y. and Dowek, G. and Hirschowitz, A. and

                   Paulin, C. and Thery, L.},

   series	= {LNCS 1690},

   year		= 1999}

 @PROCEEDINGS{tphols2000,

   editor          = "J. Harrison and M. Aagaard",

   booktitle       = "Theorem Proving in Higher Order Logics:

                      13th International Conference, TPHOLs 2000",

   series          = "Lecture Notes in Computer Science",

   volume          = 1869,

   year            = 2000,

   publisher       = "Springer-Verlag"}