Kirsten Berkenkötter Ulrich Hannemann Modeling the Railway Control Domain Rigorously with a UML 2.0 Profile. 398-411 2006 conf/safecomp/2006 SAFECOMP http://dx.doi.org/10.1007/11875567_30 db/conf/safecomp/safecomp2006.html#BerkenkotterH06