Program verification in SPARK and ACSL : a comparative case study - Brito, Eduardo (2010)