Gerard J. Holzmann An Improved Protocol Reachability Analysis Technique. 137-161 1988 18 Softw., Pract. Exper. 2 db/journals/spe/spe18.html#Holzmann88