Fault injection for the formal testing of fault tolerance | IEEE Conference Publication | IEEE Xplore