Junfeng Yang Paul Twohey Dawson R. Engler Madanlal Musuvathi Using model checking to find serious file system errors. 393-423 2006 24 ACM Trans. Comput. Syst. 4 http://doi.acm.org/10.1145/1189256.1189259 db/journals/tocs/tocs24.html#YangTEM06