Verification Of Object-Oriented Software by B.A. Beckert