How Did Software Get So Reliable Without Proof? - Hoare, C (Springer, 1996)