Spin Model Checking And Software Verification by Klaus Havelund & J. Penix