Formal specification and automated verification of railway software with Frama-C | IEEE Conference Publication | IEEE Xplore