Formal Specification and Analysis of AFDX Redundancy Management Algorithms. - Jan Täubrich; Reinhard von Hanxleden (SAFECOMP, 2007)