Deriving self-stabilizing protocols for services specified in LOTOS