Proving correctness of refinement and implementation (1996)

by Springer
Venue:Lecture Notes in Computer Science