An Experience in Formal Verification of Safety Properties of a Railway Signalling Control System. - A. Anselmi; Cinzia Bernardeschi; Alessandro Fantechi; Stefania Gnesi; Salvatore Larosa; Giorgio Mongardi; Fernando Torielli (SAFECOMP, 1995)

Model Checking Safety Critical Software with SPIN: An Application to a Railway Interlocking System. - Alessandro Cimatti; Fausto Giunchiglia; Giorgio Mongardi; Dario Romano; Fernando Torielli; Paolo Traverso (SAFECOMP, 1998)

Formal Verification of a Railway Interlocking System using Model Checking. - Alessandro Cimatti; Fausto Giunchiglia; Giorgio Mongardi; Dario Romano; Fernando Torielli; Paolo Traverso (Formal Aspects Comput., 1998)