Automatic verification of fault tolerance using model checking | IEEE Conference Publication | IEEE Xplore