Formal verification of arbiters using property strengthening and underapproximationsGadiel AuerbachFady Coptyet al.2010FMCAD 2010