Model checking complete requirements specifications using abstraction (1999)

by R Bharadwaj, C Heitmeyer
Venue:Automated Software Engineering Journal