Using Model Checking to Generate Test Cases for Critical Systems pocketEngelsk, 2010