Butler, Michael, Cliff B. Jones, Alexander Romanovsky, and Elena Troubitsyna. Rigorous Development of Complex Fault-Tolerant Systems. Berlin: Springer, 2006.