Formal Methods For Industrial Critical Systems by D. Cofer