Sanjai Narain Orville Cockings Ritu Chadha A Formal Model of SONET's Alarm-Surveillance Procedures and their Simulation. 235-250 1993 conf/forte/1993 FORTE db/conf/forte/forte1993.html#NarainCC93