Gerry Musgrave Formal Methods For Design. 710 1992 conf/ifip/1992-1 IFIP Congress (1) db/conf/ifip/ifip92-1.html#Musgrave92