Program Verification Techniques for Hardware-Level Vulnerabilities (opens in new tab)

The TLS termination proxy had been running cleanly for eight months when the security audit flagged it.