Gerard J. Holzmann Rajeev Joshi Alex Groce Tackling Large Verification Problems with the Swarm Tool. 134-143 2008 SPIN http://dx.doi.org/10.1007/978-3-540-85114-1_11 conf/spin/2008 db/conf/spin/spin2008.html#HolzmannJG08