Gan, X.; Dubrovin, J.; Heljanko, K. A Symbolic Model Checking Approach to Verifying Satellite Onboard Software. ECEASST 2011, 46.