PICGAL: Practical Use of Formal Specification to Develop a Complex Critical System. - Lionel Devauchelle; Peter Gorm Larsen; Henrik Voss (FME, 1997)