Formal methods: promises and problems | IEEE Journals & Magazine | IEEE Xplore