Using Event-B for Critical Device Software Systems sidottuEnglanti, 2013