Bandera: extracting finite-state models from Java source code
Patterns in Property Specifications for Finite-State Verification