Javier Tuya Luciano Sánchez José A. Corrales Using a Symbolic Model Checker for Verify Safety Properties in SA/RT Models. 59-75 1995 conf/esec/1995 ESEC db/conf/esec/esec95.html#TuyaSC95 https://doi.org/10.1007/3-540-60406-5_7