Formal Verification of Object-Oriented Software by Bernhard Beckert