Specification and Verification of Reactive System Behaviour: The Railroad Crossing Example.

James Armstrong Leonor Barroca Specification and Verification of Reactive System Behaviour: The Railroad Crossing Example. 143-178 1996 10 Real-Time Systems 2 db/journals/rts/rts10.html#ArmstrongB96