Checking Formal Specifications under Simulation. - William Canfield; E. Allen Emerson; Avijit Saha (ICCD, 1997)