Checking JML-encoded finite state machine properties | IEEE Conference Publication | IEEE Xplore