Deductive Reasoning versus Model Checking: Two Formal Approaches for System Development. - Joy N. Reed; Jane E. Sinclair; F. Guigand (IFM, 1999)