Werner Stephan Georg Rock Michael Brodski Modeling Specification and Verification of an Emergency Closing System. 356-360 2000 conf/flairs/2000 FLAIRS Conference db/conf/flairs/flairs2000.html#StephanRB00