Nevin Heintze Joxan Jaffar Razvan Voicu Conditional Analysis and Verification. 33-49 2000 conf/aplas/2000 APLAS db/conf/aplas/aplas2000.html#HeintzeJV00