Gnesi, S.2022-03-022022-03-021996https://publica.fraunhofer.de/handle/publica/132612ERCIM Workshop on Formal Methods for Industrial Critical Systems 1996