Alberto Tacchella, Emanuele Beozzo, Bruno Crispo, and Marco Roveri. 2025. Firmware Secure Updates meet Formal Verification. ACM Trans. Cyber-Phys. Syst. Just Accepted (July 2025).