TY - SER AU - Holzmann, Gerard J. TI - The Model Checker Spin KW - Formal Methods KW - Program Verification KW - Design Verification ER -