Model checking for an executable subset of UML | IEEE Conference Publication | IEEE Xplore