Matteo Bordin Tullio Vardanega Correctness by Construction for High-Integrity Real-Time Systems: A Metamodel-Driven Approach. 114-127 2007 conf/adaEurope/2007 Ada-Europe http://dx.doi.org/10.1007/978-3-540-73230-3_9 db/conf/adaEurope/adaEurope2007.html#BordinV07