Formal Verification of Simulink/Stateflow Diagrams : A Deductive Approach /: A Deductive Approach. (2017)