@article(AB01,
 author       = {P. Ammann and P.E. Black},
 year         = {2001},
 title        = {A specification-based coverage metric to evaluate test sets},
 journal      = {International Journal of Quality, Reliability and Safety Engineering},
 volume       = {8},
 number       = {4},
 pages        = {275--300},
 doi          = {10.1142/S0218539301000530},
)
@article(BBCOT12,
 author       = {I. Beer and Ben-David, S. and H. Chockler and A. Orni and R. J. Trefler},
 year         = {2012},
 title        = {Explaining counterexamples using causality},
 journal      = {Formal Methods in System Design},
 volume       = {40},
 number       = {1},
 pages        = {20--40},
 doi          = {10.1007/s10703-011-0132-2},
)
@article(BBER01,
 author       = {I. Beer and {Ben-David}, S. and C. Eisner and Y. Rodeh},
 year         = {2001},
 title        = {Efficient detection of vacuity in {ACTL} formulas},
 journal      = {Formal Methods in System Design},
 volume       = {18},
 number       = {2},
 pages        = {141--162},
 doi          = {10.1023/A:1008779610539},
)
@inproceedings(CGY08,
 author       = {H. Chockler and O. Grumberg and A. Yadgar},
 year         = {2008},
 title        = {Efficient automatic {STE} refinement using responsibility},
 booktitle    = {Proc.~14th Conference on Tools and Algorithms for the Construction and Analysis of Systems},
 pages        = {233--248},
 doi          = {10.1007/978-3-540-78800-3\_17},
)
@article(CH04,
 author       = {H. Chockler and J.Y. Halpern},
 year         = {2004},
 title        = {Responsibility and blame: a structural-model approach},
 journal      = {Journal of Artificial Intelligence Research (JAIR)},
 volume       = {22},
 pages        = {93--115},
)
@inproceedings(CK02a,
 author       = {H. Chockler and O. Kupferman},
 year         = {2002},
 title        = {Coverage of Implementations by Simulating Specifications},
 editor       = {Baeza-Yates, R.A. and U. Montanari and N. Santoro},
 booktitle    = {Proceedings of 2nd IFIP International Conference on Theoretical Computer Science},
 series       = {IFIP Conference Proceedings},
 volume       = {223},
 publisher    = {Kluwer Academic Publishers},
 address      = {Montreal, Canada},
 pages        = {409--421},
)
@inproceedings(CKKV01,
 author       = {H. Chockler and O. Kupferman and R.P. Kurshan and M.Y. Vardi},
 year         = {2001},
 title        = {A Practical Approach to Coverage in Model Checking},
 booktitle    = {Computer Aided Verification, Proc. 13th International Conference},
 series       = {Lecture Notes in Computer Science},
 volume       = {2102},
 publisher    = {Springer-Verlag},
 pages        = {66--78},
 doi          = {10.1007/3-540-44585-4\_7},
)
@inproceedings(CKV01,
 author       = {H. Chockler and O. Kupferman and M.Y. Vardi},
 year         = {2001},
 title        = {Coverage Metrics for Temporal Logic Model Checking},
 booktitle    = {Tools and algorithms for the construction and analysis of systems},
 series       = {Lecture Notes in Computer Science},
 volume       = {2031},
 publisher    = {Springer-Verlag},
 pages        = {528 -- 542},
 doi          = {10.1007/3-540-45319-9\_36},
)
@inproceedings(CKV03,
 author       = {H. Chockler and O. Kupferman and M.Y. Vardi},
 year         = {2003},
 title        = {Coverage Metrics for Formal Verification},
 booktitle    = {Correct Hardware Design and Verification Methods (CHARME)},
 series       = {Lecture Notes in Computer Science},
 volume       = {2860},
 publisher    = {Springer-Verlag},
 pages        = {111--125},
 doi          = {10.1007/978-3-540-39724-3\_11},
)
@inproceedings(CFKL15,
 author       = {Hana Chockler and Norman E. Fenton and Jeroen Keppens and David A. Lagnado},
 year         = {2015},
 title        = {Causal analysis for attributing responsibility in legal cases},
 booktitle    = {Proceedings of the 15th International Conference on Artificial Intelligence and Law, {ICAIL}},
 publisher    = {{ACM}},
 pages        = {33--42},
 doi          = {10.1145/2746090.2746102},
)
@article(CHK08,
 author       = {Hana Chockler and Joseph Y. Halpern and Orna Kupferman},
 year         = {2008},
 title        = {What causes a system to satisfy a specification?},
 journal      = {ACM Trans. Comput. Log.},
 volume       = {9},
 number       = {3},
 doi          = {10.1145/1352582.1352588},
)
@book(CGP99,
 author       = {E. M. Clarke and O. Grumberg and D. A. Peled},
 year         = {1999},
 title        = {Model Checking},
 publisher    = {MIT Press},
 address      = {Cambridge, Mass.},
)
@inproceedings(CGMZ95,
 author       = {E.M. Clarke and O. Grumberg and K.L. McMillan and X. Zhao},
 year         = {1995},
 title        = {Efficient generation of counterexamples and witnesses in symbolic model checking},
 booktitle    = {Proc. 32nd Design Automation Conference},
 publisher    = {IEEE Computer Society},
 pages        = {427--432},
 doi          = {10.1145/217474.217565},
)
@incollection(Hall98,
 author       = {N. Hall},
 year         = {2004},
 title        = {Two concepts of causation},
 editor       = {J. Collins and N. Hall and L. A. Paul},
 booktitle    = {Causation and Counterfactuals},
 publisher    = {MIT Press},
 address      = {Cambridge, Mass.},
)
@article(HP01b,
 author       = {J. Y. Halpern and J. Pearl},
 year         = {2005},
 title        = {Causes and explanations: A structural-model approach. {P}art {I}: {C}auses},
 journal      = {British Journal for Philosophy of Science},
 volume       = {56},
 number       = {4},
 pages        = {843--887},
 doi          = {10.1093/bjps/axi148},
)
@inproceedings(Hal15b,
 author       = {Joseph Y. Halpern},
 year         = {2015},
 title        = {A Modification of the Halpern-Pearl Definition of Causality},
 booktitle    = {Proceedings of the Twenty-Fourth International Joint Conference on Artificial Intelligence, {IJCAI}},
 publisher    = {{AAAI} Press},
 pages        = {3022--3033},
)
@inproceedings(HP01,
 author       = {J.Y. Halpern and J. Pearl},
 year         = {2001},
 title        = {Causes and Explanations: A Structural-Model Approach --- Part 1: Causes},
 booktitle    = {Uncertainty in Artificial Intelligence: Proceedings of the 17th Conference (UAI-2001)},
 publisher    = {Morgan Kaufmann Publishers},
 address      = {San Francisco, CA},
 pages        = {194--202},
)
@inproceedings(HKHZ99,
 author       = {Y. Hoskote and T. Kam and P.-H Ho and X. Zhao},
 year         = {1999},
 title        = {Coverage estimation for symbolic model checking},
 booktitle    = {Proc. 36th Design automation conference},
 pages        = {300--305},
)
@book(Hum39,
 author       = {D. Hume},
 year         = {1939},
 title        = {A treatise of human nature},
 publisher    = {John Noon, London},
)
@inproceedings(Kup06,
 author       = {O. Kupferman},
 year         = {2006},
 title        = {Sanity Checks in Formal Verification},
 booktitle    = {Proc. 17th International Conference on Concurrency Theory},
 series       = {Lecture Notes in Computer Science},
 volume       = {4137},
 publisher    = {Springer-Verlag},
 pages        = {37--51},
 doi          = {10.1007/11817949\_3},
)
@article(KV03a,
 author       = {O. Kupferman and M.Y. Vardi},
 year         = {2003},
 title        = {Vacuity detection in temporal model checking},
 journal      = {Journal on Software Tools For Technology Transfer},
 volume       = {4},
 number       = {2},
 pages        = {224--233},
 doi          = {10.1007/s100090100062},
)
@article(LGZ13,
 author       = {D.A. Lagnado and T. Gerstenberg and R. Zultan},
 year         = {2013},
 title        = {Causal responsibility and counterfactuals},
 journal      = {Cognitive Science},
 volume       = {37},
 pages        = {1036--1073},
 doi          = {10.1111/cogs.12054},
)
@article(MLS78,
 author       = {R.A. De Millo and R.J. Lipton and F.G. Sayward},
 year         = {1978},
 title        = {Hints on test data selection: Help for the practicing programmer},
 journal      = {IEEE Computer},
 volume       = {11},
 number       = {4},
 pages        = {34--41},
 doi          = {10.1109/C-M.1978.218136},
)
@article(MO91,
 author       = {R.A. De Millo and A.J. Offutt},
 year         = {1991},
 title        = {Constraint-based automatic test data generation},
 journal      = {IEEE Transactions on Software Engineering},
 volume       = {17},
 number       = {9},
 pages        = {900--910},
 doi          = {10.1109/32.92910},
)
@misc(RBurl,
 title        = {{RuleBase PE Homepage}},
 note         = {{h}ttp://www.haifa.il.ibm.com/projects/verification/RB$\_$Homepage},
)
@inproceedings(HighSchubert,
 author       = {T. Schubert},
 title        = {High level formal verification of next-generation microprocessors},
 booktitle    = {DAC'03},
)
@article(STEBryant,
 author       = {C.-J. H. Seger and R. E. Bryant},
 year         = {1995},
 title        = {Formal Verification by Symbolic Evaluation of Partially-Ordered Trajectories},
 journal      = {Formal Methods in System Design},
 volume       = {6},
 number       = {2},
 doi          = {10.1007/BF01383966},
)
@article(forte,
 author       = {C.-J. H. Seger and R. B. Jones and J. W. O'Leary and T. F. Melham and M. Aagaard and C. Barrett and D. Syme},
 year         = {2005},
 title        = {An Industrially Effective Environment for Formal Hardware Verification},
 journal      = {IEEE Trans. on Computer-Aided Design of Integrated Circuits and Systems},
 volume       = {24},
 number       = {9},
 doi          = {10.1109/TCAD.2005.850814},
)
@article(TK01,
 author       = {S. Tasiran and K. Keutzer},
 year         = {2001},
 title        = {Coverage Metrics for Functional Validation of Hardware Designs},
 journal      = {IEEE Design and Test of Computers},
 volume       = {18},
 number       = {4},
 pages        = {36--45},
 doi          = {10.1109/54.936247},
)
@inproceedings(CaseStudy,
 author       = {J. Yang and A. Goel},
 year         = {2002},
 title        = {{GSTE} through a case study},
 booktitle    = {ICCAD},
 doi          = {10.1145/774572.774651},
)