An introduction to formal specification and verification using EHDM (1991)

by J M Rushby, F von Henke, S Owre