时间触发架构中中央监护仪的模块化形式分析

Modular formal analysis of the central guardian in the Time-Triggered Architecture

Reliability Engineering and System Safety · 2006