Sandip Ray Warren A. Hunt Jr. John Matthews J. Strother Moore A Mechanical Analysis of Program Verification Strategies. 245-269 2008 40 J. Autom. Reasoning 4 http://dx.doi.org/10.1007/s10817-008-9098-1 db/journals/jar/jar40.html#RayHMM08