The Model Checker SPIN (1997)

by Gerard J Holzmann
Venue:IEEE Transactions on Software Engineering