Challenging formal specifications by mutation: a CSP security example | IEEE Conference Publication | IEEE Xplore