Paolo Ballarini Alice Miller Model Checking Medium Access Control for Sensor Networks. 255-262 2006 ISoLA http://dx.doi.org/10.1109/ISoLA.2006.16 conf/isola/2006 db/conf/isola/isola2006.html#BallariniM06