Traditional methods of testing computer systems, although valuable, are inadequate for ensuring sufficiently high quality in systems in which a high degree of reliability must be placed. Formal methods for development of ...