Formal specification and validation at work: a case study using VDM-SL. - Sten Agerholm; Pierre-Jean Lecoeur; Etienne Reichert (FMSP, 1998)