Kevin Lano Pauline Kan Arturo Sanchez Linking Hazard Analysis to Formal Specification and Design in B. 60-74 http://link.springer.de/link/service/series/0558/bibs/1516/15160060.htm 1998 conf/safecomp/1998 SAFECOMP db/conf/safecomp/safecomp98.html#LanoKS98