Tony Hoare The Ideal of Verified Software. 5-16 2006 conf/cav/2006 CAV http://dx.doi.org/10.1007/11817963_4 db/conf/cav/cav2006.html#Hoare06