Design and Specification of Embedded Systems in Java Using Successive, Formal Refinement. - James Shin Young; Josh MacDonald; Michael Shilman; Abdallah Tabbara; Paul N. Hilfinger; A. Richard Newton (DAC, 1998)