Ulrich Stern David L. Dill Parallelizing the Murj Verifier. 117-129 2001 18 Formal Methods in System Design 2 db/journals/fmsd/fmsd18.html#SternD01