Testing formal specifications to detect design errors (1985)

by R A Kemmerer
Venue:In IEEE Transactions on Software Engineering