Software Design, Specification, and Verification: Lessons Learned from the Rether Case Study. - Xiaoqun Du; Kevin T. McDonnell; Evangelos Nanos; Y. S. Ramakrishna; Scott A. Smolka (AMAST, 1997)