Model checking large software specifications (1998)

by William Chan, Richard J Anderson, Paul Beame, Steve Burns, Francesmary Modugno, David Notkin, Jon D Reese
Venue:IEEE Transactions on Software Engineering