NUSMV: a new symbolic model verifier