System refinement in VDM-SL | IEEE Conference Publication | IEEE Xplore