Vlad Rusu Hervé Marchand Thierry Jéron Automatic Verification and Conformance Testing for Validating Safety Properties of Reactive Systems. 189-204 2005 conf/fm/2005 FM http://dx.doi.org/10.1007/11526841_14 db/conf/fm/fm2005.html#RusuMJ05