Modular Specification And Verification Of Object-Oriented Programs door Peter Müller & Paul Müller