Model Checking (1999)

by E Clarke, O Grumberg