Shoham Ben-David Cindy Eisner Daniel Geist Yaron Wolfsthal Model Checking at IBM. 101-108 2003 22 Formal Methods in System Design 2 http://dx.doi.org/10.1023/A:1022905120346 db/journals/fmsd/fmsd22.html#Ben-DavidEGW03