M Abadi, L Lamport - … on Programming Languages and Systems. Also …, 1995 - microsoft.com
We show how to specify components of concurrent systems. The specification of a system is
the conjunction of its components' specifications. Properties of the system are proved by …