An Experience in Formal Verification of Safety Properties of a Railway Signalling Control System. - A. Anselmi; Cinzia Bernardeschi; Alessandro Fantechi; Stefania Gnesi; Salvatore Larosa; Giorgio Mongardi; Fernando Torielli (SAFECOMP, 1995)