Radu Siminiceanu Gianfranco Ciardo Formal Verification of the NASA Runway Safety Monitor. 179-194 2005 128 Electr. Notes Theor. Comput. Sci. 6 http://dx.doi.org/10.1016/j.entcs.2005.04.011 db/journals/entcs/entcs128.html#SiminiceanuC05