Leslie Lamport Proving the Correctness of Multiprocess Programs. 125-143 1977 3 IEEE Trans. Software Eng. 2 db/journals/tse/tse3.html#Lamport77