The SPIN Model Checker (1997)

by G J Holzmann
Venue:IEEE Transactions of Software Engineering