Ian Toyn Andy Galloway Proving Properties of Stateflow Models Using ISO Standard Z and CADiZ. 104-123 2005 conf/zum/2005 ZB http://dx.doi.org/10.1007/11415787_7 db/conf/zum/zb2005.html#ToynG05