Title: The SPIN Model Checker
First published: September 4, 2003