Christine Lafontaine Yves Ledru Pierre-Yves Schobbens An Experiment in Formal Software Development: Using the B Theorem Prover on a VDM Case Study. 34-42 1990 ICSE db/conf/icse/icse90.html#LafontaineLS90