Michael J. Butler Michael Leuschel Combining CSP and B for Specification and Property Verification. 221-236 2005 conf/fm/2005 FM https://doi.org/10.1007/11526841_16 db/conf/fm/fm2005.html#ButlerL05