Verifying the correctness of AADL-modules using model checking (0)

by B Josko