Joseph Sifakis The Quest for Correctness-Beyond a Posteriori Verification. 4 2009 SPIN http://dx.doi.org/10.1007/978-3-642-02652-2_3 conf/spin/2009 db/conf/spin/spin2009.html#Sifakis09