Author: Germany) NATO Advanced Study Institute on Engineering Theories of Software Construction (2000 : Marktoberdorf