A practical method for verifying event-driven software (1999)

by G J Holzmann, M H Smith
Venue:In ICSE