The Model Checker SPIN (1997)

by G J Holzmann
Venue:IEEE Transaction on Software Engineering