Hao Chen Drew Dean David Wagner Model Checking One Million Lines of C Code. 2004 conf/ndss/2004 NDSS http://www.isoc.org/isoc/conferences/ndss/04/proceedings/Papers/Chen.pdf db/conf/ndss/ndss2004.html#ChenDW04