A verification method for finite dateflow networks with constraints applied to the verification of the alternating bit protocol (1987)

by T Streicher