Formal veri of an avionics microprocessor (1995)

by M K Srivas, S P Miller