Verification of Reactive Systems (2004)

by K Schneider