From graphical design in STATEMATE to formal specification in Event B | IEEE Conference Publication | IEEE Xplore