Wolfgang Grieskamp
Markov chains Resolution abstract state machines automata constraint resolution correct systems design correctness proofs finite state machines formal methods formal testing interactive testing model checking real-time testing theorem proving