“…For validation and verification purposes, this formal specification can then be subjected to various types of analysis, for example, completeness and consistency analysis [17,19] model checking [15,9,10,20,11], theorem proving [1,2], and test case generation [8,14,13,4,28,21,30]. Through manual inspections, formal verification, and simulation and testing we convince ourselves (and any regulatory agencies) that the software specification possesses desired properties.…”