Elements of style: Analyzing a software design feature with a counterexample detector (1996)

by Daniel Jackson, Craig Damon
Venue:IEEE Transactions on Software Engineering