Anne Elisabeth Haxthausen A Domain-Specific Framework for Automated Construction and Verification of Railway Control Systems. 1-3 2009 SAFECOMP http://dx.doi.org/10.1007/978-3-642-04468-7_1 conf/safecomp/2009 db/conf/safecomp/safecomp2009.html#Haxthausen09