E Ghassabani,
M Whalen… - 2017 Formal Methods in …, 2017 - ieeexplore.ieee.org
Symbolic model checkers can construct proofs of safety properties over complex models, but
when a proof succeeds, the results do not generally provide much insight to the user …