Arie Gurfinkel Benet Devereux Marsha Chechik Model exploration with temporal logic query checking. 139-148 2002 SIGSOFT FSE http://doi.acm.org/10.1145/587051.587073 db/conf/sigsoft/fse2002.html#GurfinkelDC02