Olaf Müller Tobias Nipkow Combining Model Checking and Deduction for I/O-Automata. 1-16 1995 conf/tacas/1995 TACAS db/conf/tacas/tacas95.html#MullerN95