Thierry Jéron Pierre Morel Test Generation Derived from Model-Checking. 108-121 http://dx.doi.org/10.1007/3-540-48683-6_12 1999 conf/cav/1999 CAV db/conf/cav/cav99.html#JeronM99