Opportunities and challenges for formal methods tools in the certification of avionics software
Model checking JAVA programs using JAVA PathFinder