M. Baptista Susanne Graf Jean-Luc Richier Luís Rodrigues Carlos Rodriguez Paulo Veríssimo Jacques Voiron Formal Specification and Verification of a Network Independent Atomic Multicast Protocol. 345-352 1990 conf/forte/1990 FORTE db/conf/forte/forte1990.html#BaptistaGRRRVV90