Model Checking (2000)

by E Clarke, O Grumberg, D Peled