Formal verification of distributed system using an executable C model | IEEE Journals & Magazine | IEEE Xplore