Georg DroschlWalter KuhnGerald SonneckMichael ThuswaldA Formal Methods Case Study: Using Light-Weight VDM for the Development of a Security System Module.187-197https://doi.org/10.1007/3-540-40891-6_172000conf/safecomp/2000SAFECOMPdb/conf/safecomp/safecomp2000.html#DroschlKST00