Model Checking Software by Dragan Bosnacki