Deductive Proof vs. Model Checking