Ulrich Schmid Bettina Weiss John M. Rushby Formally Verified Byzantine Agreement in Presence of Link Faults. 608-616 2002 ICDCS http://computer.org/proceedings/icdcs/1585/15850608abs.htm db/conf/icdcs/icdcs2002.html#SchmidWR02