The spin model checker (1997)

by G Holzmann
Venue:IEEE Trans. on Software Engineering