Case study: Formal specification and verification of railway interlocking system | IEEE Conference Publication | IEEE Xplore