Adding formal specifications to a proven V&V process for system-critical flight software. - Jon Hagar; James M. Bieman (WIFT, 1995)