X. Gan, J. Dubrovin, and K. Heljanko, “A Symbolic Model Checking Approach to Verifying Satellite Onboard Software”, ECEASST, vol. 46, Dec. 2011.