Theo C. Ruys

Suggest Changes
Learn More
ions As mentioned above, the state space of a model M together with the property φ to be checked, is generally too big to be checked exhaustively. In order to reduce the state space of the model M,(More)
Since the introduction of the rst version of the model checker Spin in 1991, many papers have been written on improvements to the tool and on industrial applications of the tool. Less attention has(More)