How much testing is enough? Applying stopping rules to behavioral model testing | IEEE Conference Publication | IEEE Xplore