L.: Proving liveness properties of concurrent programs (1982)

by S Owicki, Lamport
Venue:ACM Trans. Program. Lang. Syst