John Derrick Eerke A. Boiten Testing Refinements of State-based Formal Specifications. 27-50 1999 9 Softw. Test., Verif. Reliab. 1 db/journals/stvr/stvr9.html#DerrickB99