Program Verification: To Err is Human.

Krzysztof R. Apt
Published in: Theory and Practice of Formal Methods (2016)