Verifying network protocols using temporal logic (1980)

by Brent Hailpern, Susan Owicki
Venue:Computation Systems Laboratory, Stanford University