Practical Application of Functional and Relational Methods for the Specification and Verification of Safety Critical Software. - Mark Lawford; Jeff McDougall; Peter Froebel; Greg Moum (AMAST, 2000)