Deriving Requirements
Types of properties
Math of invariant properties