Ann Blandford,Gavin Doherty

• Interactive Systems. Design, Specification, and Verification