Formal methods in system design (Springer New York, 1992)