Guy Durrieu Odile Laurent Christel Seguin Virginie Wiels Formal proof and test case generation for critical embedded systems using SCADE. 499-504 2004 conf/ifip/2004bis IFIP Congress Topical Sessions db/conf/ifip/ifip2004bis.html#DurrieuLSW04