Erik Poll Teaching Program Specification and Verification Using JML and ESC/Java2. 92-104 2009 TFM http://dx.doi.org/10.1007/978-3-642-04912-5_7 conf/tfm/2009 db/conf/tfm/tfm2009.html#Poll09