Prashant Saxena Noel Menezes Pasquale Cocchini Desmond Kirkpatrick The scaling challenge: can correct-by-construction design help? 51-58 2003 conf/ispd/2003 ISPD http://doi.acm.org/10.1145/640000.640014 db/conf/ispd/ispd2003.html#SaxenaMCK03