High-Integrity System Specification and Design

Book by Jonathan Bowen and Michael Hinchey