Program Construction and verification - Backhouse, Roland C. 1948- (1987)