Verification of external specifications of reactive systems | IEEE Journals & Magazine | IEEE Xplore