Jean Souyris Denis Favre-Felix Proof of properties in avionics. 527-536 2004 conf/ifip/2004bis IFIP Congress Topical Sessions db/conf/ifip/ifip2004bis.html#SouyrisF04