Ian Toyn Andy Galloway Formal Validation of Hierarchical State Machines against Expectations. 181-190 2007 ASWEC http://doi.ieeecomputersociety.org/10.1109/ASWEC.2007.23 conf/aswec/2007 db/conf/aswec/aswec2007.html#ToynG07