Teodor Rus Eric Van Wyk Tom Halverson Generating Model Checkers from Algebraic Specifications. 249-284 2002 20 Formal Methods in System Design 3 db/journals/fmsd/fmsd20.html#RusWH02