Formal verification of Simulink/Stateflow diagrams : a deductive approach - Zhan, Naijun, (Springer, 2016)