Making changes to formal specifications: requirements and an example | IEEE Journals & Magazine | IEEE Xplore