Serdar Tasiran Yuan Yu Brannon Batson Using a formal specification and a model checker to monitor and direct simulation. 356-361 2003 conf/dac/2003 DAC http://doi.acm.org/10.1145/775832.775926 db/conf/dac/dac2003.html#TasiranYB03