Dennis DamsBooksFM 2009 : Formal MethodsTheoretical and Practical Aspects of SPIN Model CheckingConcurrency, Compositionality, and CorrectnessAuthor data: Open Library