The ASTOOT approach to testing object-oriented programs
The algebraic specification of abstract data types