Simin Nadjm-Tehrani Jan-Erik Strömberg Formal Verification of Dynamic Properties in an Aerospace Application. 135-169 1999 14 Formal Methods in System Design 2 db/journals/fmsd/fmsd14.html#Nadjm-TehraniS99