Verifying system behaviors in EAST-ADL2 with the SPIN model checker | IEEE Conference Publication | IEEE Xplore