How to construct formal arguments that persuade certifiers (1999)

by A P Moore, J E Klinker, D M Mihelcic
Venue:In Industrial-Strength Formal Methods in Practice