Gary Lindstrom Peter C. Mehlitz Willem Visser Model Checking Real Time Java Using Java PathFinder. 444-456 2005 conf/atva/2005 ATVA http://dx.doi.org/10.1007/11562948_33 db/conf/atva/atva2005.html#LindstromMV05