On the formal specification of group membership services (1995)

by E ANCEAUME, B CHARRON-BOST, P MINET, S TOUEG