Andrew Ireland Bill J. Ellis Andrew Cook Roderick Chapman Janet Barnes An Integrated Approach to High Integrity Software Verification. 379-410 2006 36 J. Autom. Reasoning 4 http://dx.doi.org/10.1007/s10817-006-9034-1 db/journals/jar/jar36.html#IrelandECCB06