1. Alspaugh, T. et al. (1988). Software Requirements for the A-7E Aircraft. Naval Research Laboratory.
2. Anderson, R., et al. (1996). Model Checking Large Software Specifications. ACM Proc. of 4th Int. Symp. on the Foundation of Software Engineering.
3. Atlee, J. M., and Gannon, J. (1993). State-Based Model Checking of Event-Driven System Requirements. IEEE Transaction on Software Engineering, 19(1): 24–40.
4. Bharadwaj, R., and Heitmeyer, C. (1997). Model Checking Complete Requirements Specifications Using Abstraction. Technical Report No. NRL-7999, NRL.
5. Bharadwaj, R., and Sims, S. (2000). Salsa: Combining Solvers with BDDs for Automated Invariant Checking. Tools and Algorithms for the Construction and Analysis of Systems, Lecture Notes in CS, Springer.