Anjali Joshi Mats Per Erik Heimdahl Model-Based Safety Analysis of Simulink Models Using SCADE Design Verifier. 122-135 2005 conf/safecomp/2005 SAFECOMP http://dx.doi.org/10.1007/11563228_10 db/conf/safecomp/safecomp2005.html#JoshiH05