selected publications

• chapter

  • Modular Formal Analysis of the Central Guardian in the Time-Triggered Architecture.  Springer eBooks. 240-253. 2004

• conference paper

  • Model checking a fault-tolerant startup algorithm: from design exploration to exhaustive fault simulation.  . 2004
  • Formal analysis for dependability properties: the time-triggered architecture example.  . 2002