PRISM: Probabilistic symbolic model checker (2002)

by Marta Kwiatkowska, Gethin Norman, David Parker