Introduction Formal Specification And Z (2nd Edition)