Applications of formal methods (Prentice Hall, 1995)