Bandera: extracting finite-state models from Java source code
Model checking JAVA programs using JAVA PathFinder