Practical formal methods with VDM - Andrews, Derek; Ince, Darrel 1948- (McGraw-Hill international series in software engineering, 1991)