Ranjit Jhala Rupak Majumdar Software model checking. 2009 41 ACM Comput. Surv. 4 http://doi.acm.org/10.1145/1592434.1592438 db/journals/csur/csur41.html#JhalaM09