Klaus Schneider Jens Brandt Performing causality analysis by bounded model checking. 78-87 2008 ACSD http://dx.doi.org/10.1109/ACSD.2008.4574599 conf/acsd/2008 db/conf/acsd/acsd2008.html#SchneiderB08