Nina Saxena Jason Baumgartner Avijit Saha Jacob A. Abraham To model check or not to model check. 314-320 1998 conf/iccd/1998 ICCD https://doi.org/10.1109/ICCD.1998.727067 https://doi.ieeecomputersociety.org/10.1109/ICCD.1998.727067 db/conf/iccd/iccd1998.html#SaxenaBSA98