Andy Galloway Frantz Iwu John A. McDermid Ian Toyn On the Formal Development of Safety-Critical Software. 362-373 2005 VSTTE http://dx.doi.org/10.1007/978-3-540-69149-5_39 conf/vstte/2005 db/conf/vstte/vstte2005.html#GallowayIMT05