“…6 We omit from this work other formal analysis and checking capabilities of the tool which do not fall into model checking such as, for example, invariant checking of dynamic structures (Becker et al, 2006), hybrid behavior (Burmester et al, 2007), and automatic refinement synthesis of component behavior (Henkler et al, 2009). 7 This terminology has been taken from Medvidovic and Taylor (2000).…”