Verifying a replicated database: A case study in model-checking CSP (1994)

by A W Roscoe, H MacCarthy