Michael Jackson Pamela Zave Deriving Specifications from Requirements: An Example. 15-24 1995 ICSE http://doi.acm.org/10.1145/225014.225016 db/conf/icse/icse95.html#JacksonZ95