"Model Checking Large Software Specifications."

Richard J. Anderson et al. (1996)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics