Using model checking to generate tests from requirements specifications,” (1999)

by A Gargantini, C Heitmeyer
Venue:SIGSOFT Softw. Eng. Notes,