Michael Goldsmith Nick Moffat Bill Roscoe Tim Whitworth Irfan Zakiuddin Watchdog Transformations for Property-Oriented Model-Checking. 600-616 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2805&spage=600 2003 conf/fm/2003 FME db/conf/fm/fme2003.html#GoldsmithMRWZ03