Symbolic model checking an approach to the state explosion problem - McMillan, Kenneth L. (School of Computer Science <Pittsburgh, Pa.>: CMU-CS, 1992)