shlomifr··on The Case for Formal Verification (2013)This is very relevant in the light of Heartbleed. Core security code should be verified formally, there is no other way to guarantee correctness of implementation.