Christopher Paul Gerrard Derek Coleman Robin M. Gallimore Formal Specification and Design Time Testing. 1-12 http://doi.ieeecomputersociety.org/10.1109/32.44359 1990 16 IEEE Trans. Software Eng. 1 db/journals/tse/tse16.html#GerrardCG90