Types as models: model checking message-passing programs (2002)

by S Chaki, S K Rajamani, J Rehof
Venue:In 29th ACM SIGPLAN-SIGACT POPL