Methodology for formal design of hardware control with application to cache coherence protocolsCindy EisnerIrit Shitsevalovet al.2000DAC 2000