selected publications conference paper AVATAR: A SysML Environment for the Formal Verification of Safety and Security Properties. . 1-10. 2011