Mohammed Al Achhab Ahmed Hammad Hassan Mountassir Verifying LTL Properties on Hierarchical Systems: Application to Aircraft Autopilot. 28-35 2006 ISoLA http://dx.doi.org/10.1109/ISoLA.2006.10 conf/isola/2006 db/conf/isola/isola2006.html#AchhabHM06