Using model checking for Trivial File Transfer Protocol validation | IEEE Conference Publication | IEEE Xplore