Dragan Bosnacki Dennis Dams Leszek Holenderski Natalia Sidorova Model Checking SDL with Spin. 363-377 http://dx.doi.org/10.1007/3-540-46419-0_25 2000 conf/tacas/2000 TACAS db/conf/tacas/tacas2000.html#BosnackiDHS00