Software model checking
Finite state software specifications
Reactive systems (avionics, automotive, etc.)
Hierarchical state machine specifications
Not intended to help with proving
consistency of specification and
implementation
Rather, checking properties of the specification
itself