The AADL/S* Approach to Firmware Design Verification | IEEE Journals & Magazine | IEEE Xplore