Aaron R. Bradley Zohar Manna Checking Safety by Inductive Generalization of Counterexamples to Induction. 173-180 2007 conf/fmcad/2007 FMCAD http://doi.ieeecomputersociety.org/10.1109/FMCAD.2007.15 db/conf/fmcad/fmcad2007.html#BradleyM07