Formal Verification of Control Software: A Case Study. - Andreas Griesmayer; Roderick Bloem; Martin Hautzendorfer; Franz Wotawa (IEA/AIE, 2005)