Security modelling and formal verification of survivability properties: Application to cyber–physical systems | Publicación