3 Ariel Fuxman John Mylopoulos Marco Pistore Paolo Traverso 2001 Model Checking Early Requirements Specifications in Tropos. RE-2001, the 9th IEEE International Requirements Engineering Conference. Toronto, Canada pub