Tuya, J. ., Sánchez, L. ., & Corrales, J. A. (1995). Using a symbolic model checker for verify safety properties in SA/RT models (W. . Schäfer & P. . Botella, Eds.). Berlin, Heidelberg: Springer Berlin Heidelberg.