Scott D. Stoller Model-checking multi-threaded distributed Java programs. 71-91 2002 4 STTT 1 http://link.springer.de/link/service/journals/10009/bibs/2004001/20040071.htm db/journals/sttt/sttt4.html#Stoller02