Conceptual Framework
1 Carnegie Mellon UniversitySPINFlavio Lerda SPIN An explicit state model checker.