A Finite State Analysis of Time-Triggered CAN (TTCAN) Protocol Using Spin | IEEE Conference Publication | IEEE Xplore