Upgrade of Highly Available Systems: Formal Methods at the Rescue | IEEE Conference Publication | IEEE Xplore