Victor L. Winter, Deepak Kapur, G. Fuehrer. Formal Specifcation and Refinement of a Safe Train Control Function. In Fabrice Kordon, Michel Lemoine, editors, Formal Methods for Embedded Distributed Systems - How to Master the Complexity. pages 25-64, Kluwer, 2004. [doi]
Abstract is missing.