Specifying and verifying temporal behavior of high assurance systems using reachability tree logic | IEEE Conference Publication | IEEE Xplore