Zijian Zhou Xiaoyu Song Sofiène Tahar Eduard Cerny Francisco Corella Michel Langevin Formal Verification of the Island Tunnel Controller Using Multiway Decision Graphs. 233-247 1996 conf/fmcad/1996 FMCAD db/conf/fmcad/fmcad1996.html#ZhouSTCCL96