Formal verification for fault-tolerant architectures: prolegomena to the design of PVS
IEEE Transactions on Software Engineering
F. von Henke
N. Shankar
S. Owre
A theory of normed simulations