The SPIN Model Checker. (2004)

by G J Holzmann