Bernard Elspas Karl N. Levitt Richard J. Waldinger Abraham Waksman An Assessment of Techniques for Proving Program Correctness. 97-147 1972 4 ACM Comput. Surv. 2 db/journals/csur/csur4.html#ElspasLWW72