An industrial strength theorem prover for a logic based on commonlisp (1997)

by M Kaufmann, J Moore
Venue:IEEE Transactions on Software Engineering