Empirical study of a distributed cooperative verification exercise (1997)

by Joseph Goguen