Proving the correctness of multiprocess programs (1977)

by L Lamport
Venue:IEEE Transactions on Software Engineering