James C. Corbett Matthew B. Dwyer John Hatcliff Robby Expressing checkable properties of dynamic systems: the Bandera Specification Language. 34-56 2002 4 STTT 1 http://link.springer.de/link/service/journals/10009/bibs/2004001/20040034.htm db/journals/sttt/sttt4.html#CorbettDH02