Abstracting formal specifications to generate software tests via model checking / - Ammann, Paul E. (U.S. Dept. of Commerce, Technology Administration, National Institute of Standards and Technology,, 1999)