Practical formal methods with VDM - Andrews, Derek (McGraw-Hill, 1991)