Model checking complete requirements specifications using abstraction (1997)

by R Bharadwaj, C Heitmeyer
Venue:In First ACM SIGPLAN Workshop on Automatic Analysis of Software