Ishrat Sami Brian Dupee Qualitative Comparison of B, VDM and Z in Specifying Requirements of Safety Critical Systems. 469-475 2008 Software Engineering Research and Practice conf/serp/2008 db/conf/serp/serp2008.html#SamiD08