www.prismmodelchecker.org
[SCG+14] Bradley Schmerl, Javier Cámara, Jeffrey Gennari, David Garlan, Paulo Casanova, Gabriel A. Moreno, Thomas J. Glazier and Jeffrey M. Barnes. Architecture-based self-protection: composing and reasoning about denial-of-service mitigations. In Proc. 2014 Symposium and Bootcamp on the Science of Security (HotSoS'14). 2014. [Proposes adaptive techniques for denial-of-service mitigation, including formal analysis of adaptation strategies using PRISM.]
Links: [Google] [Google Scholar]

Publications