Judith Crow Ben L. Di Vito Formalizing Space Shuttle Software Requirements: Four Case Studies. 296-332 1998 7 ACM Trans. Softw. Eng. Methodol. 3 http://doi.acm.org/10.1145/287000.287023 db/journals/tosem/tosem7.html#CrowV98