Proving properties of concurrent systems with SPIN (1995)

by G J Holzmann
Venue:Lecture Notes in Computer Science