Henri B. Weinberg Nancy A. Lynch Correctness of vehicle control systems-a case study. 62-72 1996 conf/rtss/1996 IEEE Real-Time Systems Symposium http://computer.org/proceedings/rtss/7689/76890062abs.htm db/conf/rtss/rtss1996.html#WeinbergL96