1. JPF-SE: a symbolic execution extension to Java PathFinder;Anand,2007
2. Zing: a model checker for concurrent software;Andrews,2004
3. M. Archer, C. Heitmeyer, S. Sims, TAME: a PVS interface to simplify proofs for automata models, in: User Interfaces for Theorem Provers, Eindhoven, The Netherlands, 1998.
4. A refinement calculus for software components and architectures;Barbosa;SIGSOFT Softw. Eng. Notes,2005
5. Principles of the Spin Model Checker;Ben-Ari,2008