PVS: Combining specification, proof checking, and model checking (1996)

by S Owre, S Rajan, J Rushby, N Shankar, M Srivas
Venue:In Computer Aided Verification