Using formal specifications to support testing | ACM Computing Surveys (CSUR) | DeepDyve