Formal methods for real-time computing by Constance Heitmeyer, Dino Mandrioli