The Modelling Framework: Event-B - Using Event-B for Critical Device Software Systems - page 59

28. Lamport, L. (1994). A temporal logic of actions. ACM Transactions on Programming Lan-
guages and Systems , 16 (3), 872-923.
29. Lamport, L. (2002). Specifying systems: The TLA + language and tools for hardware and
software engineers . Reading: Addison-Wesley.
30. Lano, K., Bicarregui, J., & Sanchez, A. (1999). Invariant-based synthesis and composition of
control algorithms using B. In FM'99—B users group meeting—Applying B in an industrial
context: Tools, lessons and techniques (pp. 69-86).
31. Leavens, G. T., Abrial, J.-R., Batory, D., Butler, M., Coglio, A., Fisler, K., et al. (2006).
Roadmap for enhanced languages and methods to aid verification. In Fifth international con-
ference on generative programming and component engineering , GPCE 2006 (pp. 221-235).
New York: ACM.
32. Merz, S. (2007). The specification language TLA + .InD.Bjørner&M.C.Henson(Eds.),
EATCS textbook in computer science . Logics of specification languages (pp. 381-430). Berlin:
Springer.
33. Moreau, L., & Duprat, J. (2001). A construction of distributed reference counting. Acta Infor-
matica , 37 , 563-595.
34. Morgan, C. (1990). Prentice Hall international series in computer science . Programming from
specifications . Upper Saddle River: Prentice Hall.
35. Reisig, W. (2007). Abstract state machines for the classroom. In D. Bjørner & M. C. Henson
(Eds.), EATCS textbook in computer science . Logics of specification languages (pp. 1-32).
Berlin: Springer.
36. RODIN (2004). Rigorous open development environment for complex systems.

http://rodin-b-sharp.sourceforge.net .
37. Spivey, J. M. (1987). Understanding Z: A specification language and its formal semantics .
38. Stärk, R., Schmid, J., & Börger, E. (2001). Java and the Java virtual machine .Berlin:
Springer.