Michael Fisher Boris Konev Alexei Lisitsa Temporal Verification of Fault-Tolerant Protocols. 44-56 2009 Methods, Models and Tools for Fault Tolerance http://dx.doi.org/10.1007/978-3-642-00867-2_3 series/lncs/5454 db/series/lncs/lncs5454.html#FisherKL09