Marco Bozzano Alessandro Cimatti Marco Roveri Joost-Pieter Katoen Viet Yen Nguyen Thomas Noll Verification and performance evaluation of aadl models. 285-286 2009 ESEC/SIGSOFT FSE http://doi.acm.org/10.1145/1595696.1595744 conf/sigsoft/2009 db/conf/sigsoft/fse2009.html#BozzanoCRKNN09