1. Toshiaki Arai, Tomoki Sekiguchi, Masahide Satoh, Taro Inoue, Tomoaki Nakamura, and Hideki Iwao. Darma: Using different OSs concurrently based on nanokernel technology. In Proc 59th-Annual Convention of Information Processing Society of Japan, volume 1, pages 139–140. Information Processing Society of Japan, 1999. In Japanese.
2. W. Chan, R. J. Anderson, P. Beanie, S. Burns, F. Modugno, D. Notkin, and J. D. Reese. Model checking large software specifications. IEEE Transactions on Software Engineering, 24(7):498–520, July 1998.
3. E.M. Clarke, O. Grumberg, and D.A. Peled. Model Checking. The MIT Press, 1999.
4. Gerard J. Holzmann. The model checker SPIN. Software Engine 23(5):279–295, 1997.
5. G.J. Holzmann. Design and Validation of Computer Protocols. Prentice-Hall, 1991.