1. Key Laboratory of High Confidence Software Technologies (Ministry of Education), School of Computer Science, Peking University, Beijing, China
2. Peking University, Beijing, China
3. Princeton University, New Jersey, United States
4. Key Laboratory of High Confidence Software Technologies (Ministry of Education), School of Computer Science, Peking University, Beijing, China, Telecom SudParis and Institut Polytechnique de Paris, Evry, France