Using Model Checking to Generate Test Cases for Critical Systems door Wei Ding