Design and Validation of Computer Protocols door Gerard Holzmann