From requirements change to design change: a formal path | IEEE Conference Publication | IEEE Xplore