"Set Theory for Verification: I. From Foundations to Functions"

Lawrence C. Paulson (1993)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics