Enforcing dependable operations by model checking a visualization layer | IEEE Conference Publication | IEEE Xplore