David A. Duce Elizabeth V. C. Fielding Formal Specification - A Comparison of Two Techniques. 316-327 1987 30 Comput. J. 4 db/journals/cj/cj30.html#DuceF87 https://doi.org/10.1093/comjnl/30.4.316