The Case for Using Simulation to Validate Event-B Specifications | IEEE Conference Publication | IEEE Xplore