Natarajan Shankar;Jim Woodcock
-;-
Formal methods: Practice and experience
ACM Computing Surveys (CSUR)