Use of invariant properties to evaluate the results of fault-injection-based robustness testing of protocol implementations | IEEE Conference Publication | IEEE Xplore