1995
An Experience in Formal Verification of Safety Properties of a Railway Signalling Control System.
Proceedings of the 14th International Conference on Computer Safety, 1995