Steffen Helke Thomas Neustupny Thomas Santen Automating Test Case Generation from Z Specifications with Isabelle. 52-71 1997 conf/zum/1997 ZUM db/conf/zum/zum1997.html#HelkeNS97