Formal Verification of Object-Oriented Software door Bernhard Beckert