Anindya Basu J. Gregory Morrisett Thorsten von Eicken Promela++: A Language for Constructing Correct and Efficient Protocols. 455-462 1998 INFOCOM db/conf/infocom/infocom1998-2.html#BasuME98