Bernhard Beckert Steffen Schlager Peter H. Schmitt An Improved Rule for While Loops in Deductive Program Verification. 315-329 2005 conf/icfem/2005 ICFEM http://dx.doi.org/10.1007/11576280_22 db/conf/icfem/icfem2005.html#BeckertSS05