Dan Craigen

• Formal Methods for Trustworthy Computer Systems : Report from FM89