Thomas A. Henzinger Orna Kupferman Shaz Qadeer From Pre-Historic to Post-Modern Symbolic Model Checking. 303-327 2003 23 Formal Methods in System Design 3 http://dx.doi.org/10.1023/A:1026228213080 db/journals/fmsd/fmsd23.html#HenzingerKQ03