"Checking Java Programs via Guarded Commands."

K. Rustan M. Leino, James B. Saxe, Raymie Stata (1999)
a service of Schloss Dagstuhl - Leibniz Center for Informatics