Hans de Nivelle Ruzica Piskac Verification of an Off-Line Checker for Priority Queues. 210-219 2005 conf/sefm/2005 SEFM http://doi.ieeecomputersociety.org/10.1109/SEFM.2005.54 db/conf/sefm/sefm2005.html#NivelleP05