The SPIN model checker: Primer and reference manual (2003)

by Gerard J Holzmann