Author: england International Symposium of Formal Methods Europe 1996 Oxford