Using Symbolic Model Checking