Formal verification of control system software - Garoche, Pierre-Loïc (The MIT Press, 2019)