The application of formal methods in safety analysis for safety critical software systems. - Kenneth H. W. Chan (2009)