Mandayam K. Srivas

• Formal verification of an avionics microprocessor