Visual counterexample explanation for model checking with OERITTE | IEEE Conference Publication | IEEE Xplore