Rigorous development of complex fault-tolerant systems (Springer, 2006)