Shige Wang Model Transformation for High-Integrity Software Development in Derivative Vehicle Control System Design. 227-234 2007 conf/hase/2007 HASE http://doi.ieeecomputersociety.org/10.1109/HASE.2007.51 db/conf/hase/hase2007.html#Wang07