Gerard J. Holzmann Rajeev Joshi Alex Groce New Challenges in Model Checking. 65-76 2008 25 Years of Model Checking http://dx.doi.org/10.1007/978-3-540-69850-0_4 conf/spin/5000 db/conf/spin/lncs5000.html#HolzmannJG08a