Marcello Bonfé Cesare Fantuzzi Cristian Secchi Verification of Behavioral Substitutability in Object-Oriented Models for Industrial Controllers. 3978-3983 2005 conf/icra/2005 ICRA db/conf/icra/icra2005.html#BonfeFS05 http://dx.doi.org/10.1109/ROBOT.2005.1570729