Michael J. Butler Cliff B. Jones Alexander Romanovsky Elena Troubitsyna Rigorous Development of Complex Fault-Tolerant Systems [FP6 IST-511599 RODIN project] RODIN Book Lecture Notes in Computer Science 4157 Springer 2006 3-540-48265-2 db/conf/rodin/rodin2006.html