Jin Yang Andreas Tiemeyer Lazy symbolic model checking. 35-38 2000 DAC http://doi.acm.org/10.1145/337292.337307 db/conf/dac/dac2000.html#YangT00