Report Number: CSL-TR-78-159
Institution: Stanford University, Computer Systems Laboratory
Title: Specification and verification of network mail system
Author: Owicki, Susan S.
Date: November 1978
Abstract: Techniques for describing and verifying modular systems are illustrated using a simple network mail problem. The design is presented in a top-down style. At each level of refinement, the specifications of the higher level are verified from the specifications of lower level components.
http://i.stanford.edu/pub/cstr/reports/csl/tr/78/159/CSL-TR-78-159.pdf