Formal Verification for Fault-Tolerant Architectures: Some Lessons Learned.

Sam Owre, John M. Rushby, Natarajan Shankar, Friedrich W. von Henke

Browse the full FM paper archive.