Fabrice Bouquet Frédéric Dadeau Julien Groslambert Checking JML Specifications with B Machines. 434-453 2005 conf/zum/2005 ZB http://dx.doi.org/10.1007/11415787_25 db/conf/zum/zb2005.html#BouquetDG05