Principles of the Spin model checker - Ben-Ari, Mordechai, 1948- (Springer, 2008)