[1] A. Hall, “Seven Myths of Formal Methods,” IEEE Soft-ware, September 1990, pp. 11-19.
[2] C. B. Jones, “Systematic Software Development Using VDM,” Prentice-Hall International, London, 1986.
[3] S. J. Garland, J. V. Guttag and J. J. Horning. “Debugging Larch Shared Language Specifications,” IEEE Transac-tions on Software Engineering, September 1990, pp. 1044-1057.
[4] W. Howden, “A Functional Approach to Program Testing and Analysis,” IEEE Transactions on Software Engi-neering, October 1986, pp. 997-1005.
[5] L. J. White, “Basic mathematical Definitions and Results in Testing,” In: B. Chandrasekaran and S. Radicchi, Ed., Computer Program Testing, North-Holland, 1981, pp. 13-24.
[6] R. DeMillo, R. Lipton and A. Perlis, “Social Processes and Proofs of Theorems and Programs,” Communications of the ACM, May 1979, pp. 803-820.
[7] B. W. Johnson, “Design and Analysis of Fault-Tolerant Digital Systems,” Addison-Wesley, Massachusetts, 1989.
[8] D. Dreilinger and L. J. Lin, “Using Fault Injection to Test Software Recovery Code,” November 1995.
[9] N. G. M. Leme, E. Martins and C. M. F. Rubira, “A Software Fault Injection Pattern System,” Proceedings of the 9th Brazilian Symposium on Fault-Tolerant Compu-ting, Florianópolis, 5-7 March 2001, pp. 99-113.