Industrial-Strength Formal Methods in Practice door Michael G. Hinchey & Jonathan P. Bowen