Proving the correctness of multiprocess programs (1977)

by L Lamport
Venue:IEEE Transaction of Software Engineering