@InProceedings{SRSP:DSN04, author = "Wilfried Steiner and John Rushby and Maria Sorea and Holger Pfeifer", title = "{Model Checking a Fault-Tolerant Startup Algorithm: From Design Exploration To Exhaustive Fault Simulation}", year = 2004, booktitle = "Proc. of the International Conference on Dependable Systems and Networks", pages = "189--198", publisher = "IEEE Computer Society", address = "Florence, Italy", month = jun }