I. Introduction
Failures in safety-critical systems such as train control systems could cause serious consequences including human injuries or deaths. Therefore, it is vitally important to test safety-critical systems thoroughly. In particular, behaviors that could lead to hazards must be identified and tested.