Gan, Xiang, et al. “A Symbolic Model Checking Approach to Verifying Satellite Onboard Software”. Electronic Communications of the EASST, vol. 46, Dec. 2011, doi:10.14279/tuj.eceasst.46.681.