System verification and testing by F. Verbeek & N. van Vught-Hage