A practical method for verifying event-driven software (1999)

by G J Holzmann, M H Smith
Venue:in Proc. ICSE99