Model Checking Abstract State Machines door Kirsten Winter