Elements of style: analyzing a software design feature with a counterexample detector (1996)

by D Jackson, C A Damon
Venue:IEEE Transactions on Software Engineering