@inproceedings{UmenoLynchFM2006,
   author = "Shinya Umeno and Nancy Lynch",
   title  = "Proving safety properties of an aircraft landing protocol using 
            {I/O} Automata and the {PVS} theorem prover: a case study",
   booktitle = "FM 2006: Formal Methods",
   address = "Hamilton, Ontario Canada",
   month =     "August",
   year  =   "2006",  
   publisher = {Springer},
   Series = "Lecture Notes in Computer Science",
   volume = 4084,
   pages =  "64 -- 80"
}