Model checking investigations for fault protection system validation
Following the trend of creating flight code with state chart modeling and auto-code generation, NASA's Deep Impact (DI) project uses Stateflow for its Fault Protection Flight Software development.