Gerard J. Holzmann Designing bug-free protocols with SPIN. 97-105 1997 20 Computer Communications 2 http://dx.doi.org/10.1016/S0140-3664(96)01150-4 db/journals/comcom/comcom20.html#Holzmann97