selected publications chapter Modular Formal Analysis of the Central Guardian in the Time-Triggered Architecture. Springer eBooks. 240-253. 2004