Using formal methods to derive test frames in category-partition testing | IEEE Conference Publication | IEEE Xplore