The role of formal methods in the requirements analysis of safety-critical systems: a train set example | IEEE Conference Publication | IEEE Xplore