Winnowing tests: Getting quality coverage from a model checker without quantity | IEEE Conference Publication | IEEE Xplore