Antti Pakonen Igor Buzhinsky Verification of fault tolerant safety I&C systems using model checking. 969-974 2019 ICIT https://doi.org/10.1109/ICIT.2019.8755014 conf/icit2/2019 db/conf/icit2/icit2019.html#PakonenB19