Ingo Feinerer Gernot Salzer A comparison of tools for teaching formal software verification. 293-301 2009 21 Formal Asp. Comput. 3 http://dx.doi.org/10.1007/s00165-008-0084-5 db/journals/fac/fac21.html#FeinererS09