Using Simulink Design Verifier for Proving Behavioral Properties on a Complex Safety Critical System in the Ground Transportation Domain. - Jean-Frédéric Étienne; S. Fechter; E. Juppeaux (CSDM, 2010)