Model checking of a real ATM switch | IEEE Conference Publication | IEEE Xplore