Software development under Def Stan 00-55: a guide
Achieving high integrity at low cost: a constructive approach
Design by contract: the lessons of Ariane
Formal requirements analysis of an avionics control system
Supporting the evolution of distributed, non-stop, mission and safety critical systems