“…The initial model has been extended by an approximation of reachable states [9], an analysis of multiple faults [10], and a measure to identify hot-spots in the design [11]. The diagnosis environment RobuCheck [12] integrates different engines to perform the analyses.…”