Opportunities and challenges for formal methods tools in the certification of avionics software
Concurrency State Models and Java Programs