Using abstraction and model checking to detect safety violations in requirements specifications (1998)

by Constance Heitmeyer, James Kirby, Bruce Labaw, Myla Archer, Ramesh Bharadwaj
Venue:IEEE Transactions on Software Engineering