Amir Pnueli Using Abstraction to Verify Arbitrary Temporal Properties. 3 2008 APSEC http://dx.doi.org/10.1109/APSEC.2008.76 conf/apsec/2008 db/conf/apsec/apsec2008.html#Pnueli08