Verifying Autonomic Fault Mitigation Strategies in Large Scale Real-Time Systems | doi.page