Jacques Hagelstein Dominique Roelants Pierre Wodon Formal Requirements Made Practical. 127-144 1993 conf/esec/1993 ESEC db/conf/esec/esec93.html#HagelsteinRW93