"Generating error traces from verification-condition counterexamples."

K. Rustan M. Leino, Todd D. Millstein, James B. Saxe (2005)
a service of Schloss Dagstuhl - Leibniz Center for Informatics