Using a symbolic model checker for verify safety properties in SA/RT models | Publicación