Formal analysis for dependability properties: the time-triggered architecture example | IEEE Conference Publication | IEEE Xplore