Shahid Khan, Osman Hasan, Atif Mashkoor: Formal Verification and Safety Assessment of a Hemodialysis Machine. SOFSEM 2018: 241-254