Using Event-B for Critical Device Software Systems - Singh, Neeraj Kumar (Springer London : Imprint: Springer, 2013)