The AADL/S* Approach to Firmware Design Verification. - Werner Damm; Gert Döhmen; Klaus Merkel; Mathilde Sichelschmidt (IEEE Softw., 1986)