Formalization and validation of a subset of the European Train Control System. - Angelo Chiappini; Alessandro Cimatti; Luca Macchi; Oscar Rebollo; Marco Roveri; Angelo Susi; Stefano Tonetta; Berardino Vittorini (ICSE (2), 2010)