Cinzia Bernardeschi Alessandro Fantechi Stefania Gnesi Salvatore Larosa Giorgio Mongardi Dario Romano A Formal Verification Environment for Railway Signaling System Design. 139-161 1998 12 Formal Methods in System Design 2 db/journals/fmsd/fmsd12.html#BernardeschiFGLMR98