Using Event-B for Critical Device Software Systems - Singh, Neeraj Kumar (Springer London, 2013)