Formal Specification and Design Time Testing. - Christopher Paul Gerrard; Derek Coleman; Robin M. Gallimore (IEEE Trans. Software Eng., 1990)