Anne Elisabeth Haxthausen Jan Peleska Formal Development and Verification of a Distributed Railway Control System. 687-701 2000 26 IEEE Trans. Software Eng. 8 http://www.computer.org:80/tse/ts2000/e0687abs.htm db/journals/tse/tse26.html#HaxthausenP00