Susan L. Gerhart Dan Craigen Ted Ralston Experience with Formal Methods in Critical Systems. 21-28 1994 11 IEEE Software 1 http://www.computer.org:80/software/so1994/s1021abs.htm db/journals/software/software11.html#GerhartCR94