Title: Theoretical and Practical Aspects of SPIN Model Checking