Matthew Naylor Colin Runciman Finding Inputs that Reach a Target Expression. 133-142 2007 SCAM http://dx.doi.org/10.1109/SCAM.2007.30 conf/scam/2007 db/conf/scam/scam2007.html#NaylorR07