at various levels of abstraction. It is global because it takes into account all the following
aspects: a precise modeling of the hardware that implements a single node; the protocol
layers; the application code; an abstract model of the physical environment as viewed by the
sensors. The global model is executable, to enable validation by simulations, but we also
aim at analyzing the global model with various formal validation tools (automatic test …