Fernando Torielli

Model Checking Safety Critical Software with SPIN: An Application to a Railway Interlocking System

Fausto Giunchiglia, Paolo Traverso, Alessandro Cimatti, 1998, SAFECOMP.

An Experience in Formal Verification of Safety Properties of a Railway Signalling Control System

Stefania Gnesi, Salvatore Larosa, Alessandro Fantechi, 1995, SAFECOMP.

Formal Verification of a Railway Interlocking System using Model Checking

Fausto Giunchiglia, Paolo Traverso, Alessandro Cimatti, 1998, Formal Aspects of Computing.

5 Conclusions and Future Work

Fausto Giunchiglia, Paolo Traverso, Alessandro Cimatti, 1997 .