"Bandera: a source-level interface for model checking Java programs."

James C. Corbett et al. (2000)
a service of Schloss Dagstuhl - Leibniz Center for Informatics