Marcel Oliveira Jim Woodcock Automatic Generation of Verified Concurrent Hardware. 286-306 2007 conf/icfem/2007 ICFEM http://dx.doi.org/10.1007/978-3-540-76650-6_17 db/conf/icfem/icfem2007.html#OliveiraW07