Proving Critical Properties of Simulink Models | IEEE Conference Publication | IEEE Xplore