Formal Verification of Control System Software | Princeton University Press books | IEEE Xplore