The Formal Design Model of an Automatic Teller Machine (ATM) [pdf]

The Alice malware attacks is a good example of a need for more formal ATM software design toward a more secure firmware/OS package.