Aysu Betin-Can Tevfik Bultan Mikael Lindvall Benjamin Lux Stefan Topp Eliminating synchronization faults in air traffic control software via design for verification with concurrency controllers. 129-178 2007 14 Autom. Softw. Eng. 2 http://dx.doi.org/10.1007/s10515-007-0008-2 db/journals/ase/ase14.html#Betin-CanBLLT07