Antonio Cerone Paul Curzon Formal methods for interactive systems. 123 2008 4 ISSE 2 http://dx.doi.org/10.1007/s11334-008-0051-6 db/journals/isse/isse4.html#CeroneC08