Combining testing and model checking for verification of high assurance systems | IEEE Conference Publication | IEEE Xplore