Using Model Checking to Generate Test Cases for Critical Systems pocketEngelska, 2010