Formally Verifying Aspects of Time-Triggered Controller Area Network (phases 1 and 2a) Breadcrumbs UL Home Research Publications Year of Publication 2002