Mark Lawford, Alan Wassyng"Formal Verification of Nuclear Systems: Past, Present, and Future."Information & Security: An International Journal28,no. 2(2012):223-235.28.18_Lawford_Wassyng.pdf