The SPIN model checker : primer and reference manual - Holzmann, Gerard J. (Addison-Wesley, 2011)