Angelo Gargantini Elvinia Riccobene Salvatore Rinzivillo Using Spin to Generate Testsfrom ASM Specifications. 263-277 2003 conf/asm/2003 Abstract State Machines http://link.springer.de/link/service/series/0558/bibs/2589/25890263.htm db/conf/asm/asm2003.html#GargantiniRR03