Program verification - Francez, Nissim (International computer science series, 1992)