www.prismmodelchecker.org
[TPT+12] Anton Tarasyuk, Inna Pereverzeva, Elena Troubitsyna, Timo Latvala and Laura Nummila. Formal Development and Assessment of a Reconfigurable On-board Satellite System. In Proc. International Conference on Computer Safety, Reliability, and Security (SAFECOMP'12), pages 210-222. 2012. [Uses Event-B, in conjunction with PRISM, to verify fault tolerance of satellite systems.]
Links: [Google] [Google Scholar]

Publications