Karama Kanoun Marie Borrel Thierry Morteveille Alain Peytavin Modeling the Dependability of CAUTRA, a Subset of the French Air Traffic Control System. 106-115 1996 conf/ftcs/1996 FTCS db/conf/ftcs/ftcs96.html#KanounBMP96 http://doi.ieeecomputersociety.org/10.1109/FTCS.1996.534599