On Model Checking Safety Properties (2002)
[BibTex]