Using event-B for critical device software systems - Singh, Neeraj Kumar (Springer, 2013)