Spin Model Checking And Software Verification door Klaus Havelund & J. Penix