Dahl (1992)
Dahl O-J. (1992)
Verifiable Programming
Prentice Hall