@article{Rushby_1999,
    doi = {10.1109/32.815324},
    url = {https://doi.org/10.1109%2F32.815324},
    year = {1999},
    publisher = {Institute of Electrical and Electronics Engineers ({IEEE})},
    volume = {25},
    number = {5},
    pages = {651--660},
    author = {J. Rushby},
    title = {Systematic formal verification for fault-tolerant time-triggered algorithms},
    journal = {{IEEE} Transactions on Software Engineering}
}

@article{Rushby_1999, doi = {10.1109/32.815324}, url = {https://doi.org/10.1109%2F32.815324}, year = {1999}, publisher = {Institute of Electrical and Electronics Engineers ({IEEE})}, volume = {25}, number = {5}, pages = {651--660}, author = {J. Rushby}, title = {Systematic formal verification for fault-tolerant time-triggered algorithms}, journal = {{IEEE} Transactions on Software Engineering} }