Formal Verification of Transmission Window Timing for the Time-Triggered Architecture (2001)

by J Rushby
Venue:Technical Report Deliverable 24b, SRI Project 11003