Willem Visser Klaus Havelund Guillaume P. Brat Seungjoon Park Flavio Lerda Model Checking Programs. 203-232 2003 10 Autom. Softw. Eng. 2 http://dx.doi.org/10.1023/A:1022920129859 db/journals/ase/ase10.html#VisserHBPL03