Duncan Clarke Thierry Jéron Vlad Rusu Elena Zinovieva STG: a tool for generating symbolic test programs and oracles from operational specifications. 301-302 2001 ESEC / SIGSOFT FSE http://doi.acm.org/10.1145/503209.503252 db/conf/sigsoft/fse2001.html#ClarkeJRZ01