Edmund M. Clarke Orna Grumberg Somesh Jha Yuan Lu Helmut Veith Counterexample-guided abstraction refinement for symbolic model checking. 752-794 2003 50 J. ACM 5 http://doi.acm.org/10.1145/876638.876643 db/journals/jacm/jacm50.html#ClarkeGJLV03