Gordon Fraser Franz Wotawa Paul Ammann Issues in using model checkers for test case generation. 1403-1418 2009 82 Journal of Systems and Software 9 http://dx.doi.org/10.1016/j.jss.2009.05.016 db/journals/jss/jss82.html#FraserWA09