3 S. Bernardi F. Francesco S. Marrone José Merseguer C. Papa V. Vittorini 2011 Model-driven availability evaluation of railway control systems 30th International Conference on Computer Safety, Reliability and Security (Safecomp'11) Napoli (Italy)