faultmill

a tool to identify and exercise dependability stress tests; it analytically derives such worst-case fault injection campaigns from dependability models (e.g., a fault trees) and runs them via user-provided executables