Symbolic Model Checking: An Approach to the State Explosion Problem (1992)

by K McMillan