Ivy verifier [Google Scholar] Notes: Papers: Papers related to Ivy verifier Formal specification and testing of QUIC [mcmillan:sigcomm:2019]