Susan L. Gerhart David R. Musser David H. Thompson D. A. Baker R. L. Bates Roddy W. Erickson R. L. London D. G. Taylor David S. Wile An Overview of AFFIRM: A Specification and Verification System. 343-347 1980 IFIP Congress db/conf/ifip/ifip80.html#GerhartMTBBELTW80