"Proving the correctness of implementations of shared data abstractions."

László Kozma (1982)
a service of Schloss Dagstuhl - Leibniz Center for Informatics