Multi-level specification and verification of real-time software | IEEE Conference Publication | IEEE Xplore