"Using History Invariants to Verify Observers."

K. Rustan M. Leino, Wolfram Schulte (2007)
a service of Schloss Dagstuhl - Leibniz Center for Informatics