Gordon Fraser Franz Wotawa Paul Ammann Testing with model checkers: a survey. 215-261 2009 19 Softw. Test., Verif. Reliab. 3 http://dx.doi.org/10.1002/stvr.402 db/journals/stvr/stvr19.html#FraserWA09