The Gallery
Model checking
Moshe Y. Vardi
1