Model Checking Of Safety Properties