Owre� John Rushby� Natarajan Shankar� and Friedrich von Henke. Formal veri�cation for fault�tolerant architectures� Prolegomena to the design of PVS (1995)

by Sam
Venue:IEEE Transactions on Software Engineering