Author: NASA Formal Methods Workshop (2nd 1992)