Aysu Betin-Can Tevfik Bultan Mikael Lindvall Benjamin Lux Stefan Topp Application of design for verification with concurrency controllers to air traffic control software. 14-23 2005 conf/kbse/2005 ASE http://doi.acm.org/10.1145/1101908.1101914 db/conf/kbse/ase2005.html#Betin-CanBLLT05