Formal Methods for Industrial Critical Systems door Tiziana Margaria