Filip Van Aelten Stan Y. Liao Jonathan Allen Srinivas Devadas Automatic generation and verification of sufficient correctness properties for synchronous processors. 183-187 1992 ICCAD http://doi.acm.org/10.1145/304032.304082 db/conf/iccad/iccad1992.html#AeltenLAD92