Title: Formal methods in safety critical systems
First published: 1991