selected publications conference paper Formal analysis for dependability properties: the time-triggered architecture example. . 2002