Anthony Hall Making Formal Methods Work. 261-262 2005 conf/sefm/2005 SEFM http://doi.ieeecomputersociety.org/10.1109/SEFM.2005.27 db/conf/sefm/sefm2005.html#Hall05