Andreas Podelski Model Checking as Constraint Solving. 22-37 2000 conf/sas/2000 SAS db/conf/sas/sas2000.html#Podelski00