Model Checking Reconfigurable Processor Configurations for Safety Properties. - John Cochran; Deepak Kapur; Darko Stefanovic (FPL, 2003)