Functional program testing and analysis - William E Howden