Arnab Ray Rance Cleaveland Unit verification: the CARA experience. 351-369 2004 5 STTT 4 http://www.springerlink.com/index/10.1007/s10009-003-0134-5 db/journals/sttt/sttt5.html#RayC04