Principles of the Spin Model Checker - Ben-Ari, Mordechai (Springer London, 2008)