John Mullins Raveca Oarga Model Checking of Extended OCL Constraints on UML Models in SOCLe. 59-75 2007 conf/fmoods/2007 FMOODS http://dx.doi.org/10.1007/978-3-540-72952-5_4 db/conf/fmoods/fmoods2007.html#MullinsO07