K. Rustan M. Leino Data Groups: Specifying the Modification of Extended State. 144-153 1998 OOPSLA http://doi.acm.org/10.1145/286936.286953 db/conf/oopsla/oopsla98.html#Leino98