Etienne, et al.. Using Simulink Design Verifier for Proving Behavioral Properties on a Complex Safety Critical System in the Ground Transportation Domain. Springer Berlin Heidelberg, 2010, doi:10.1007/978-3-642-15654-0_4.