Book

SPIN Model Checking and Software Verification

by Klaus Havelund, John Penix, Willem Visser