CAV 2002Software Analysis and Model CheckingGerard J. HolzmannDOI 10.1007/3-540-45657-0_1dblpBibTeXNo abstract available.