Verifying OSEK/VDX OS Design Using Its Formal Specification | IEEE Conference Publication | IEEE Xplore