Roxana Geambasu Andrew Birrell John MacCormick Experiences with formal specification of fault-tolerant file systems. 96-101 2008 DSN http://dx.doi.org/10.1109/DSN.2008.4630075 conf/dsn/2008 db/conf/dsn/dsn2008.html#GeambasuBM08