Formal specification and verification of a group membership protocol for an intrusion-tolerant group communication system | IEEE Conference Publication | IEEE Xplore