Karen Summerskill

• Formal Methods for Trustworthy Computer Systems : Report from FM89