1. J. Rushby, D. Stringer-Calvert, 1995, A Less Elementary Tutorial for the PVS Specification and Verification System, Technical report CSL-95-10.
2. Introduction To HOL: A Theorem Proving Environment for Higher Order Logic;Gordon,1993
3. Isabelle: A Generic Theorem Prover;Paulson,1994
4. Symbolic Model Checking;McMillan,1993
5. 1998, Nucleus Plus Documentation