An overview of formal verification for the time-triggered architecture (2002)

by John Rushby
Venue:of Lecture Notes in Computer Science