<bibliography>
 <citation type="book" key="EventB">
  <author>Jean-Raymond <surname>Abrial</surname></author>
  <year>2010</year>
  <title>Modeling in Event-B - System and Software Engineering</title>
  <publisher>Cambridge University Press</publisher>
  <doi>10.1017/CBO9781139195881</doi>
  <url>http://www.cambridge.org/uk/catalogue/catalogue.asp?isbn=9780521895569</url>
 </citation>
 <citation type="article" key="Rodin">
  <author>Jean-Raymond <surname>Abrial</surname></author>
  <author>Michael J. <surname>Butler</surname></author>
  <author>Stefan <surname>Hallerstede</surname></author>
  <author>Thai Son <surname>Hoang</surname></author>
  <author>Farhad <surname>Mehta</surname></author>
  <author>Laurent <surname>Voisin</surname></author>
  <year>2010</year>
  <title>Rodin: an open toolset for modelling and reasoning in Event-B</title>
  <journal>STTT</journal>
  <volume>12</volume>
  <number>6</number>
  <pages>447&#8211;466</pages>
  <doi>10.1007/s10009-010-0145-y</doi>
 </citation>
 <citation type="misc" key="AsmWS15">
  <year>2015</year>
  <title>The Asmeta tool set for ASM</title>
  <howpublished>http://asmeta.sourceforge.net</howpublished>
 </citation>
 <citation type="book" key="ASM">
  <author>Egon <surname>B&#246;rger</surname></author>
  <author>Robert F. <surname>St&#228;rk</surname></author>
  <year>2003</year>
  <title>Abstract State Machines. A Method for High-Level System Design and Analysis</title>
  <publisher>Springer</publisher>
  <doi>10.1007/978-3-642-18216-7</doi>
 </citation>
 <citation type="inproceedings" key="Clavel99">
  <author>M. <surname>Clavel</surname></author>
  <author>F. <surname>Durn</surname></author>
  <author>S. <surname>Eker</surname></author>
  <author>P. <surname>Lincoln</surname></author>
  <author>N. <surname>Marti-Oliet</surname></author>
  <author>J. <surname>Meseguer</surname></author>
  <author>J. F. <surname>Quesada</surname></author>
  <year>1999</year>
  <title>The Maude System</title>
  <booktitle>Rewriting Techniques and Applications</booktitle>
  <publisher>Springer, LNCS1631</publisher>
  <doi>10.1007/3-540-48685-2_18</doi>
 </citation>
 <citation type="book" key="Clavel07">
  <editor>Manuel <surname>Clavel</surname></editor>
  <editor>Francisco <surname>Dur&#225;n</surname></editor>
  <editor>Steven <surname>Eker</surname></editor>
  <editor>Patrick <surname>Lincoln</surname></editor>
  <editor>Narciso <surname>Mart&#237;-Oliet</surname></editor>
  <editor>Jos&#233; <surname>Meseguer</surname></editor>
  <editor>Carolyn L. <surname>Talcott</surname></editor>
  <year>2007</year>
  <title>All About Maude - A High-Performance Logical Framework, How to Specify, Program and Verify Systems in Rewriting Logic</title>
  <series>Lecture Notes of Computer Science</series>
  <volume>4350</volume>
  <publisher>Springer-Verlag</publisher>
  <doi>10.1007/978-3-540-71999-1</doi>
 </citation>
 <citation type="inproceedings" key="Coleman12a">
  <author>Joey W. <surname>Coleman</surname></author>
  <author>Anders Kaels <surname>Malmos</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Jan <surname>Peleska</surname></author>
  <author>Ralph <surname>Hains</surname></author>
  <author>Zoe <surname>Andrews</surname></author>
  <author>Richard <surname>Payne</surname></author>
  <author>Simon <surname>Foster</surname></author>
  <author>Alvaro <surname>Miyazawa</surname></author>
  <author>Cristiano <surname>Bertolini</surname></author>
  <author>Andr&#233; <surname>Didier</surname></author>
  <year>2012</year>
  <title>COMPASS Tool Vision for a System of Systems Collaborative Development Environment</title>
  <booktitle>Proceedings of the 7th International Conference on System of System Engineering, IEEE SoSE 2012</booktitle>
  <pages>451&#8211;456</pages>
  <doi>10.1109/SYSoSE.2012.6384150</doi>
 </citation>
 <citation type="inproceedings" key="Coleman12b">
  <author>Joey W. <surname>Coleman</surname></author>
  <author>Anders Kaels <surname>Malmos</surname></author>
  <author>Claus Ballegaard <surname>Nielsen</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <year>2012</year>
  <title>Evolution of the Overture Tool Platform</title>
  <booktitle>Proceedings of the 10th Overture Workshop 2012</booktitle>
  <series>School of Computing Science, Newcastle University</series>
 </citation>
 <citation type="misc" key="20sim">
  <author><surname>Controllab products</surname></author>
  <year>2013</year>
  <title>http://www.20sim.com/</title>
  <note>20-Sim official website</note>
 </citation>
 <citation type="inproceedings" key="Couto13a">
  <author>Lu&#237;s Diogo <surname>Couto</surname></author>
  <author>Richard <surname>Payne</surname></author>
  <year>2013</year>
  <title>The COMPASS Proof Obligation Generator: A test case of Overture Extensibility</title>
  <booktitle>Proceedings of the 11th Overture Workshop</booktitle>
 </citation>
 <citation type="inproceedings" key="Couto15b">
  <author>Lu&#237;s Diogo <surname>Couto</surname></author>
  <author>Peter W. V. <surname>Tran-J&#248;rgensen</surname></author>
  <year>2015</year>
  <title>Extending the Overture code generator towards Isabelle syntax</title>
  <booktitle>13th Overture Workshop</booktitle>
  <address>Oslo, Norway</address>
 </citation>
 <citation type="inproceedings" key="Couto15a">
  <author>Lu&#237;s Diogo <surname>Couto</surname></author>
  <author>Peter W. V. <surname>Tran-J&#248;rgensen</surname></author>
  <author>Joey W. <surname>Coleman</surname></author>
  <author>Kenneth <surname>Lausdahl</surname></author>
  <year>2015</year>
  <title>Migrating to an Extensible Architecture for Abstract Syntax Trees</title>
  <booktitle>12th Working IEEE / IFIP Conference on Software Architecture</booktitle>
 </citation>
 <citation type="misc" key="website:dltk">
  <author><surname>Eclipse</surname></author>
  <year>2015</year>
  <title>Dynamic Languages Toolkit</title>
  <url>http://eclipse.org/dltk/</url>
 </citation>
 <citation type="misc" key="EventBWs15">
  <year>2015</year>
  <title>Event-B and the Rodin Platform</title>
  <howpublished>http://www.event-b.org</howpublished>
 </citation>
 <citation type="book" key="Fitzgerald09">
  <author>John <surname>Fitzgerald</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <year>2009</year>
  <title>Modelling Systems &#8211; Practical Tools and Techniques in Software Development</title>
  <edition>Second</edition>
  <publisher>Cambridge University Press</publisher>
  <address>The Edinburgh Building, Cambridge CB2 2RU, UK</address>
  <doi>10.1017/CBO9780511626975</doi>
  <note>ISBN 0-521-62348-0</note>
 </citation>
 <citation type="book" key="Fitzgerald05">
  <author>John <surname>Fitzgerald</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Paul <surname>Mukherjee</surname></author>
  <author>Nico <surname>Plat</surname></author>
  <author>Marcel <surname>Verhoef</surname></author>
  <year>2005</year>
  <title>Validated Designs for Object&#8211;oriented Systems</title>
  <publisher>Springer, New York</publisher>
  <doi>10.1007/b138800</doi>
  <url>http://overturetool.org/publications/books/vdoos/</url>
 </citation>
 <citation type="article" key="Fitzgerald08a">
  <author>John <surname>Fitzgerald</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Shin <surname>Sahara</surname></author>
  <year>2008</year>
  <title>VDMTools: Advances in Support for Formal Modeling in VDM</title>
  <journal>ACM Sigplan Notices</journal>
  <volume>43</volume>
  <number>2</number>
  <pages>3&#8211;11</pages>
  <doi>10.1145/1361213.1361214</doi>
 </citation>
 <citation type="book" key="Fitzgerald14c">
  <editor>John <surname>Fitzgerald</surname></editor>
  <editor>Peter Gorm <surname>Larsen</surname></editor>
  <editor>Marcel <surname>Verhoef</surname></editor>
  <year>2014</year>
  <title>Collaborative Design for Embedded Systems &#8211; Co-modelling and Co-simulation</title>
  <publisher>Springer</publisher>
  <doi>10.1007/978-3-642-54118-6</doi>
  <url>http://link.springer.com/book/10.1007/978-3-642-54118-6</url>
 </citation>
 <citation type="incollection" key="Foster15">
  <author>Simon <surname>Foster</surname></author>
  <author>Frank <surname>Zeyda</surname></author>
  <author>Jim <surname>Woodcock</surname></author>
  <year>2015</year>
  <title>Isabelle/UTP: A mechanised theory engineering framework</title>
  <booktitle>Unifying Theories of Programming</booktitle>
  <publisher>Springer</publisher>
  <pages>21&#8211;41</pages>
  <doi>10.1007/978-3-319-14806-9_2</doi>
 </citation>
 <citation type="inproceedings" key="Gagnon98">
  <author>Etienne M. <surname>Gagnon</surname></author>
  <author>Laurie J. <surname>Hendren</surname></author>
  <year>1998</year>
  <title>SableCC, an Object-Oriented Compiler Framework</title>
  <booktitle>Proceedings of the Technology of Object-Oriented Languages and Systems</booktitle>
  <series>TOOLS '98</series>
  <publisher>IEEE Computer Society</publisher>
  <address>Washington, DC, USA</address>
  <pages>140&#8211;154</pages>
  <doi>10.1109/TOOLS.1998.711009</doi>
 </citation>
 <citation type="book" key="DESIGNPAT95">
  <author>E. <surname>Gamma</surname></author>
  <author>R. <surname>Helm</surname></author>
  <author>R. <surname>Johnson</surname></author>
  <author>R. <surname>Vlissides</surname></author>
  <year>1995</year>
  <title>Design Patterns. Elements of Reusable Object-Oriented Software.</title>
  <series>Addison-Wesley Professional Computing Series</series>
  <publisher>Addison-Wesley Publishing Company</publisher>
 </citation>
 <citation type="article" key="Hoare78">
  <author>C.A.R <surname>Hoare</surname></author>
  <year>1978</year>
  <title>Communicating Sequential Processes</title>
  <journal>Communications of the ACM</journal>
  <volume>21</volume>
  <number>8</number>
  <doi>10.1145/359576.359585</doi>
 </citation>
 <citation type="book" key="Hoare98">
  <author>Tony <surname>Hoare</surname></author>
  <author>He <surname>Jifeng</surname></author>
  <year>1998</year>
  <title>Unifying Theories of Programming</title>
  <publisher>Prentice Hall</publisher>
  <doi>10.1007/11768173</doi>
 </citation>
 <citation type="misc" key="website:isabelle-eclipse">
  <author><surname>Isabelle/Eclipse</surname></author>
  <year>2015</year>
  <title>Isabelle/Eclipse</title>
  <url>http://andriusvelykis.github.io/isabelle-eclipse/</url>
 </citation>
 <citation type="incollection" key="Jackson09doi">
  <author>Ethan K. <surname>Jackson</surname></author>
  <author>Dirk <surname>Seifert</surname></author>
  <author>Markus <surname>Dahlweid</surname></author>
  <author>Thomas <surname>Santen</surname></author>
  <author>Nikolaj <surname>Bj&#248;rner</surname></author>
  <author>Wolfram <surname>Schulte</surname></author>
  <year>2009</year>
  <title>Specifying and Composing Non-functional Requirements in Model-Based Development</title>
  <editor>Alexandre <surname>Bergel</surname></editor>
  <editor>Johan <surname>Fabry</surname></editor>
  <booktitle>Software Composition</booktitle>
  <series>Lecture Notes in Computer Science</series>
  <volume>5634</volume>
  <publisher>Springer Berlin Heidelberg</publisher>
  <pages>72&#8211;89</pages>
  <doi>10.1007/978-3-642-02655-3_7</doi>
 </citation>
 <citation type="inproceedings" key="Jones99">
  <author>Cliff B. <surname>Jones</surname></author>
  <year>1999</year>
  <title>Scientific Decisions which Characterize VDM</title>
  <editor>J.M. <surname>Wing</surname></editor>
  <editor>J.C.P. <surname>Woodcock</surname></editor>
  <editor>J. <surname>Davies</surname></editor>
  <booktitle>FM'99 - Formal Methods</booktitle>
  <publisher>Springer-Verlag</publisher>
  <pages>28&#8211;47</pages>
  <doi>10.1007/3-540-48119-2_2</doi>
  <note>Lecture Notes in Computer Science 1708</note>
 </citation>
 <citation type="inproceedings" key="Jorgensen14a">
  <author>Peter W.V. <surname>J&#248;rgensen</surname></author>
  <author>Lu&#237;s D. <surname>Couto</surname></author>
  <author>Morten <surname>Larsen</surname></author>
  <year>2014</year>
  <title>A Code Generation Platform for VDM</title>
  <booktitle>The Overture 2014 workshop</booktitle>
 </citation>
 <citation type="book" key="TLAplus">
  <author>Leslie <surname>Lamport</surname></author>
  <year>2002</year>
  <title>Specifying Systems, The TLA+ Language and Tools for Hardware and Software Engineers</title>
  <publisher>Addison-Wesley</publisher>
  <url>http://research.microsoft.com/users/lamport/tla/book.html</url>
 </citation>
 <citation type="misc" key="ISOVDM96short">
  <author>P. G. <surname>Larsen</surname></author>
  <author>B. S. <surname>Hansen</surname></author>
  <year>1996</year>
  <title>Information technology &#8211; Programming languages, their environments and system software interfaces &#8211; Vienna Development Method &#8211; Specification Language &#8211; Part 1: Base language</title>
  <note>International Standard ISO/IEC 13817-1</note>
 </citation>
 <citation type="article" key="Larsen10adoi">
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Nick <surname>Battle</surname></author>
  <author>Miguel <surname>Ferreira</surname></author>
  <author>John <surname>Fitzgerald</surname></author>
  <author>Kenneth <surname>Lausdahl</surname></author>
  <author>Marcel <surname>Verhoef</surname></author>
  <year>2010</year>
  <title>The Overture Initiative &#8211; Integrating Tools for VDM</title>
  <journal>SIGSOFT Softw. Eng. Notes</journal>
  <volume>35</volume>
  <number>1</number>
  <pages>1&#8211;6</pages>
  <doi>10.1145/1668862.1668864</doi>
 </citation>
 <citation type="inproceedings" key="Larsen10cdoi">
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Kenneth <surname>Lausdahl</surname></author>
  <author>Nick <surname>Battle</surname></author>
  <year>2010</year>
  <title>Combinatorial Testing for VDM</title>
  <booktitle>Proceedings of the 2010 8th IEEE International Conference on Software Engineering and Formal Methods</booktitle>
  <series>SEFM '10</series>
  <publisher>IEEE Computer Society</publisher>
  <address>Washington, DC, USA</address>
  <pages>278&#8211;285</pages>
  <doi>10.1109/SEFM.2010.32</doi>
  <note>ISBN 978-0-7695-4153-2</note>
 </citation>
 <citation type="inproceedings" key="Lausdahl14a">
  <author>Kenneth <surname>Lausdahl</surname></author>
  <author>Hiroshi <surname>Ishikawa</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <year>2015</year>
  <title>Interpreting Implicit VDM Specifications using ProB</title>
  <booktitle>Proceedings of the 12th Overture Workshop</booktitle>
  <series>Technical Report Series</series>
  <volume>CS-TR-1446</volume>
  <organization>Computing Science, Newcastle University</organization>
  <pages>1&#8211;15</pages>
  <url>http://www.cs.ncl.ac.uk/publications/trs/papers/1446.pdf</url>
 </citation>
 <citation type="inproceedings" key="Lausdahl11">
  <author>Kenneth <surname>Lausdahl</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Nick <surname>Battle</surname></author>
  <year>2011</year>
  <title>A Deterministic Interpreter Simulating A Distributed real time system using VDM</title>
  <editor>Shengchao <surname>Qin</surname></editor>
  <editor>Zongyan <surname>Qiu</surname></editor>
  <booktitle>Proceedings of the 13th international conference on Formal methods and software engineering</booktitle>
  <series>Lecture Notes in Computer Science</series>
  <volume>6991</volume>
  <publisher>Springer-Verlag</publisher>
  <address>Berlin, Heidelberg</address>
  <pages>179&#8211;194</pages>
  <doi>10.1007/978-3-642-24559-6_14</doi>
  <url>http://dl.acm.org/citation.cfm?id=2075089.2075107</url>
  <note>ISBN 978-3-642-24558-9</note>
 </citation>
 <citation type="incollection" key="leuschel03">
  <author>Michael <surname>Leuschel</surname></author>
  <author>Michael <surname>Butler</surname></author>
  <year>2003</year>
  <title>ProB: A model checker for B</title>
  <booktitle>FME 2003: Formal Methods</booktitle>
  <publisher>Springer</publisher>
  <pages>855&#8211;874</pages>
  <doi>10.1007/978-3-540-45236-2_46</doi>
 </citation>
 <citation type="incollection" key="leuschel05">
  <author>Michael <surname>Leuschel</surname></author>
  <author>Michael <surname>Butler</surname></author>
  <year>2005</year>
  <title>Automatic refinement checking for B</title>
  <booktitle>Formal Methods and Software Engineering</booktitle>
  <publisher>Springer</publisher>
  <pages>345&#8211;359</pages>
  <doi>10.1007/11576280_24</doi>
 </citation>
 <citation type="inproceedings" key="Mukherjee00">
  <author>Paul <surname>Mukherjee</surname></author>
  <author>Fabien <surname>Bousquet</surname></author>
  <author>J&#233;r&#244;me <surname>Delabre</surname></author>
  <author>Stephen <surname>Paynter</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <year>2000</year>
  <title>Exploring Timing Properties Using VDM++ on an Industrial Application</title>
  <editor>J.C. <surname>Bicarregui</surname></editor>
  <editor>J.S. <surname>Fitzgerald</surname></editor>
  <booktitle>Proceedings of the Second VDM Workshop</booktitle>
  <note>Available at www.vdmportal.org</note>
 </citation>
 <citation type="book" key="nipkow02">
  <author>Tobias <surname>Nipkow</surname></author>
  <author>Lawrence C <surname>Paulson</surname></author>
  <author>Markus <surname>Wenzel</surname></author>
  <year>2002</year>
  <title>Isabelle/HOL: a proof assistant for higher-order logic</title>
  <volume>2283</volume>
  <publisher>Springer Science &#38; Business Media</publisher>
  <doi>10.1007/3-540-45949-9</doi>
 </citation>
 <citation type="book" key="Parr07">
  <author>Terence <surname>Parr</surname></author>
  <year>2007</year>
  <title>The Definitive ANTLR Reference: Building Domain-Specific Languages</title>
  <publisher>Pragmatic Bookshelf</publisher>
 </citation>
 <citation type="inproceedings" key="Paulson10">
  <author>Lawrence C. <surname>Paulson</surname></author>
  <year>2010</year>
  <title>Three Years of Experience with Sledgehammer, a Practical Link between Automatic and Interactive Theorem Provers</title>
  <editor>Renate A. <surname>Schmidt</surname></editor>
  <editor>Stephan <surname>Schulz</surname></editor>
  <editor>Boris <surname>Konev</surname></editor>
  <booktitle>Proceedings of the 2nd Workshop on Practical Aspects of Automated Reasoning, PAAR-2010, Edinburgh, Scotland, UK, July 14, 2010</booktitle>
  <series>EPiC Series</series>
  <volume>9</volume>
  <pages>1&#8211;10</pages>
 </citation>
 <citation type="inproceedings" key="peleska11">
  <author>Jan <surname>Peleska</surname></author>
  <author>Elena <surname>Vorobev</surname></author>
  <author>Florian <surname>Lapschies</surname></author>
  <year>2011</year>
  <title>Automated Test Case Generation with SMT-Solving and Abstract Interpretation</title>
  <editor>Mihaela <surname>Bobaru</surname></editor>
  <editor>Klaus <surname>Havelund</surname></editor>
  <editor>Gerard J. <surname>Holzmann</surname></editor>
  <editor>Rajeev <surname>Joshi</surname></editor>
  <booktitle>Nasa Formal Methods, Third International Symposium, NFM 2011</booktitle>
  <organization>NASA</organization>
  <publisher>Springer LNCS 6617</publisher>
  <address>Pasadena, CA, USA</address>
  <pages>298&#8211;312</pages>
  <doi>10.1007/978-3-642-20398-5_22</doi>
 </citation>
 <citation type="misc" key="TlaWS15">
  <year>2015</year>
  <title>The TLA Toolbox</title>
  <howpublished>http://research.microsoft.com/en-us/um/people/lamport/tla/toolbox.html</howpublished>
 </citation>
 <citation type="phdthesis" key="Verhoef09">
  <author>Marcel <surname>Verhoef</surname></author>
  <year>2009</year>
  <title>Modeling and Validating Distributed Embedded Real-Time Control Systems</title>
  <school>Radboud University Nijmegen</school>
 </citation>
 <citation type="inproceedings" key="Verhoef06b">
  <author>Marcel <surname>Verhoef</surname></author>
  <author>Peter Gorm <surname>Larsen</surname></author>
  <author>Jozef <surname>Hooman</surname></author>
  <year>2006</year>
  <title>Modeling and Validating Distributed Embedded Real-Time Systems with VDM++</title>
  <editor>Jayadev <surname>Misra</surname></editor>
  <editor>Tobias <surname>Nipkow</surname></editor>
  <editor>Emil <surname>Sekerinski</surname></editor>
  <booktitle>FM 2006: Formal Methods</booktitle>
  <series>Lecture Notes in Computer Science 4085</series>
  <publisher>Springer-Verlag</publisher>
  <pages>147&#8211;162</pages>
  <doi>10.1007/11813040_11</doi>
 </citation>
 <citation type="inproceedings" key="Woodcock12a">
  <author>J. <surname>Woodcock</surname></author>
  <author>A. <surname>Cavalcanti</surname></author>
  <author>J. <surname>Fitzgerald</surname></author>
  <author>P. <surname>Larsen</surname></author>
  <author>A. <surname>Miyazawa</surname></author>
  <author>S. <surname>Perry</surname></author>
  <year>2012</year>
  <title>Features of CML: a Formal Modelling Language for Systems of Systems</title>
  <booktitle>Proceedings of the 7th International Conference on System of System Engineering</booktitle>
  <publisher>IEEE</publisher>
  <doi>10.1109/SYSoSE.2012.6384144</doi>
 </citation>
 <citation type="misc" key="website:xtest">
  <author><surname>Xtext</surname></author>
  <year>2015</year>
  <title>Xtext</title>
  <url>https://eclipse.org/Xtext/</url>
 </citation>
</bibliography>
