Verifying fault-tolerant behavior of state machines | IEEE Conference Publication | IEEE Xplore