Jim Woodcock Peter Gorm Larsen Juan Bicarregui John S. Fitzgerald Formal methods: Practice and experience. 2009 41 ACM Comput. Surv. 4 http://doi.acm.org/10.1145/1592434.1592436 db/journals/csur/csur41.html#WoodcockLBF09