European Train Control System: A case study in formal verification

@TECHREPORT{DBLP:conf/icfem/PlatzerQ09:TR,
	ref = {DBLP:conf/icfem/PlatzerQ09},

  author    = {Andr{\'e} Platzer and
               Jan-David Quesel},
  title     = {{European Train Control System}:
               A Case Study in Formal Verification},
  number    = {54},
  year      = {2009},
  month     = {Sep},
  editor    = {Bernd Becker and
               Werner Damm and
               Martin Fr{\"a}nzle and
               Ernst-R{\"u}diger Olderog and
               Andreas Podelski and
               Reinhard Wilhelm},
  institution = {Reports of {SFB/TR~14 AVACS}},
  type   = {Reports of {SFB/TR~14 AVACS}},
  series    = {ATR},
  note      = {ISSN: 1860-9821, http://www.avacs.org.},
  pdf={http://www.avacs.org/Publikationen/Open/avacs_technical_report_054.pdf},
}```