Author: NASA Formal Methods Workshop (4th 1997 Hampton, Va.)