Richard J. Anderson Paul Beame William Chan David Notkin Experiences with the Application of Symbolic Model Checking to the Analysis of Software Specifications. 460-469 1999 conf/ershov/1999 Ershov Memorial Conference http://dx.doi.org/10.1007/3-540-46562-6_41 db/conf/ershov/ershov1999.html#AndersonBCN99