Mike Dodds Xinyu Feng Matthew J. Parkinson Viktor Vafeiadis Deny-Guarantee Reasoning. 363-377 2009 ESOP http://dx.doi.org/10.1007/978-3-642-00590-9_26 conf/esop/2009 db/conf/esop/esop2009.html#DoddsFPV09