Christophe Ponsard Philippe Massonet Jean-François Molderez André Rifaut Axel van Lamsweerde Hung Tran Van Early verification and validation of mission critical systems. 233-247 2007 30 Formal Methods in System Design 3 http://dx.doi.org/10.1007/s10703-006-0028-8 db/journals/fmsd/fmsd30.html#PonsardMMRLV07