"Simpler Reasoning About System Properties: a Proof-by-Refinement Technique."

Diyaa-Addein Atiya, Steve King, Jim Woodcock (2005)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics