Systematic formal verification for fault-tolerant time-triggered algorithms (1999)

by John Rushby
Venue:IEEE Transactions on Software Engineering