B. Scott Andersen, George Romanski: Verification of Safety-critical Software. ACM Queue 9(8): 50 (2011)