John Derrick Heike Wehrheim On using data abstractions for model checking refinements. 41-71 2007 44 Acta Inf. 1 http://dx.doi.org/10.1007/s00236-007-0042-3 db/journals/acta/acta44.html#DerrickW07