D. L. Parnas, Tabular representation of relations, 1992.

N. K. Singh, Using Event-B for Critical Device Software Systems, 2013.

I. Lee, G. J. Pappas, R. Cleaveland, J. Hatcliff, B. H. Krogh et al., High-confidence medical device software and systems, Computer, vol.39, issue.4, pp.33-38, 2006.

A. Iliasov, E. Troubitsyna, L. Laibinis, and A. Romanovsky, Patterns for refinement automation, FMCO 2009, vol.6286, pp.70-88, 2010.

T. Kobayashi, F. Ishikawa, S. Honiden, . Tla, Z. Vdm et al., Understanding and planning Event-B refinement through primitive rationales, Abstract State Machines, vol.8477, pp.277-283, 2014.

R. Project, Rigorous open development environment for complex systems, 2004.

D. L. Parnas, J. Madey, and M. Iglewski, Precise documentation of well-structured programs, IEEE Trans. Softw. Eng, vol.20, issue.12, pp.948-976, 1994.

R. Janicki and A. Wassyng, Tabular expressions and their relational semantics. Fundam, Inform, vol.67, issue.4, pp.343-370, 2005.

Y. Jin and D. L. Parnas, Defining the meaning of tabular mathematical expressions, Special Section on the Programming Languages Track at the 23rd ACM Symposium on Applied Computing), vol.75, pp.980-1000, 2010.

G. Archinoff, R. Hohendorf, A. Wassyng, B. Quigley, and M. Borsch, Verification of the shutdown system software at the Darlington nuclear generating station, International Conference on Control and Instrumentation in Nuclear Installations, 1990.

A. Wassyng and M. Lawford, Lessons learned from a successful implementation of formal methods in an industrial project, FME 2003, vol.2805, pp.133-153, 2003.

C. Heitmeyer, J. Kirby, B. Labaw, and R. Bharadwaj, SCR: a toolset for specifying and analyzing software requirements, CAV 1998, vol.1427, pp.526-531, 1998.

J. Abrial, Modeling in Event-B: System and Software Engineering, 2010.

J. Abrial, The B-book: Assigning Programs to Meanings, 2005.

R. Back and K. Sere, Superposition refinement of reactive systems, Formal Aspects Comput, vol.8, issue.3, pp.324-346, 1996.

P. Masci, A. Ayoub, P. Curzon, I. Lee, O. Sokolsky et al., Model-based development of the generic PCA infusion pump user interface prototype in PVS, SAFECOMP 2013, vol.8153, pp.228-240, 2013.

H. Xu and T. Maibaum, An Event-B approach to timing issues applied to the generic insulin infusion pump, FHIES 2011, vol.7151, pp.160-176, 2012.

N. K. Singh, H. Wang, M. Lawford, T. S. Maibaum, and A. Wassyng, Report 18: formalizing insulin pump using Event-B. Technical report 18, McSCert, McMaster University, 2014.

H. N. Cantrell, J. King, and F. E. King, Logic-structure tables, Commun. ACM, vol.4, issue.6, pp.272-275, 1961.

K. Heninger, J. Kallander, D. L. Parnas, and J. E. Shore, Software requirements for the A-7E aircraft, NRL Memorandum report, vol.3876, 1978.

D. L. Parnas, A generalized control structure and its formal definition, Commun. ACM, vol.26, issue.8, pp.572-581, 1983.

A. Wassyng, M. Lawford, and T. S. Maibaum, Software certification experience in the Canadian nuclear industry: lessons for the future, pp.219-226, 2011.

G. J. Nalepa, A. Lig?za, and K. Kaczor, Formalization and modeling of rules using the XTT2 method, Int. J. Artif. Intell. Tools, vol.20, issue.06, pp.1107-1125, 2011.

G. J. Nalepa and A. Lig?za, The HeKatE methodology. Hybrid engineering of intelligent systems, Int. J. Appl. Math. Comput. Sci, vol.20, issue.1, pp.35-53, 2010.

E. W. Dijkstra, A Discipline of Programming, 1st edn, 1997.

C. A. Hoare, An axiomatic basis for computer programming, Commun. ACM, vol.12, issue.10, pp.576-580, 1969.

R. J. Back and J. Wright, Refinement Calculus: A Systematic Introduction, 1st edn, 1998.

C. Morgan, Programming from Specifications, 1990.

D. Méry and N. K. Singh, Automatic code generation from Event-B models, Proceedings of Second Symposium on Information and Communication Technology, pp.179-188, 2011.