Using model checking to generate tests from specifications | IEEE Conference Publication | IEEE Xplore