model extraction for arinc 653 based avionics software .
Model checking JAVA programs using JAVA PathFinder