Modular Specification And Verification Of Object-Oriented Programs by Peter Müller & Paul Müller