Formal Analysis of a Space-Craft Controller Using SPIN

Klaus Havelund
Michael R. Lowry
IEEE Trans. Software Eng., 27 (2001), pp. 749-765

Abstract