Opportunities and challenges for formal methods tools in the certification of avionics software
Symbolic PathFinder: symbolic execution of Java bytecode